11 of 11 Remote/Hybrid Contract Kusto Query Language Jobs

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

Microsoft Sentinel and Microsoft Defender XDR . Experience with FortiSIEM or involvement in SIEM platform migrations. Knowledge of Kusto Query Language (KQL). Experience with Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding ...

similar role • Hands-on experience with SIEM platforms, ideally Microsoft Sentinel and Microsoft Defender • Proficiency in Kusto Query Language (KQL), including custom queries and detection logic • Experience working with Azure and associated cloud security services • Strong understanding of security monitoring, logging and threat detection • Experience with vulnerability ...

response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love to hear from you. Reference ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

years experience in a position of Cyber Security Analyst Working experience of Splunk Working experience of M365 (Microsoft Defender/Sentinel/KQL) As an associate security analyst you will: triage and investigate cyber security alerts and reports from users use a variety of techniques to analyse systems, files, network ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

models and platform fundamentals (Azure, Snowflake, Kubecost desirable). Experience with FinOps practices and cost management tools, particularly Kubecost and cloud-native cost portals (KQL desirable). Demonstrated ability to work cross-functionally with Finance and technical teams to support cost visibility and decision-making. ...

Responsibilities Lead delivery of tenant rationalisation and security remediation activities. Design, build and optimise Microsoft Sentinel detections and analytics rules. Develop and tune KQL queries to improve threat detection coverage. Translate SOC assessment findings into a prioritised delivery backlog. Coordinate implementation activities across technical teams. Validate security improvements and ensure … agreed acceptance criteria are met. Support testing, stakeholder engagement and delivery governance. Essential Skills & Experience Strong commercial experience with Microsoft Sentinel . Advanced KQL development and detection engineering expertise. Experience designing, building and tuning analytics rules and use cases. Security Operations Centre (SOC) delivery experience. Azure security and remediation experience. ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What you'll need Solid, proven implementation experience … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

ESSENTIAL SKILLS * Strong hands-on Azure infrastructure experience. * Experience writing Terraform configurations and reusable modules. * Practical Application Insights experience and the ability to write KQL queries for troubleshooting. * Experience implementing observability, monitoring and alerting. * Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. * CI/… required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes ...