2 of 2 Contract Kusto Query Language Jobs in the North West

Monitoring: Experience working with endpoint, identity, cloud, network, authentication and security telemetry across enterprise environments. 4. Detection Analytics & Automation: Development of detection logic using KQL, SPL, Sigma, Python and PowerShell, including data correlation and Detection-as-Code practices. 5. Security Operations & Incident Response: Strong understanding of incident response, threat hunting ...

Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation Security telemetry across endpoint, identity, cloud and network environments Detection tuning, validation and false-positive reduction Detection ...