9 of 9 Permanent Kusto Query Language Jobs in Central London

similar role • Hands-on experience with SIEM platforms, ideally Microsoft Sentinel and Microsoft Defender • Proficiency in Kusto Query Language (KQL), including custom queries and detection logic • Experience working with Azure and associated cloud security services • Strong understanding of security monitoring, logging and threat detection • Experience with vulnerability ...

support. Experience applying Detection-as-Code, CI/CD, source control, and peer-review practices. Technical Knowledge and Skills Advanced Microsoft Sentinel administration, architecture, KQL, analytics rules, hunting, workbooks, watchlists, playbooks, and optimisation. Azure Monitor Agent, Azure Arc, Data Collection Rules, Log Analytics, custom tables, parsers, and custom ingestion. Windows ...

MSSP, consultancy, financial services, critical infrastructure, or other highly regulated environment. Experience with threat intelligence platforms, malware analysis, scripting, or automation using PowerShell, Python, KQL, or similar technologies. Experience developing threat hunts, response playbooks, detection rules, or security orchestration and automation workflows. Experience with Microsoft security technologies such as: Microsoft ...

they impact critical business assets. Ability to read and interpret cloud configuration exports, scripts and tooling outputs (e.g. PowerShell, Azure CLI, AWS CLI, KQL). Experience identifying and assessing cloud and cyber risks within complex environments, with the ability to communicate technical findings and business implications to both technical ...

Willingness to work in a 24/7 shift environment. Advantageous Skills Experience with Microsoft Sentinel, Microsoft Defender XDR and Entra ID. Familiarity with KQL, MITRE ATT&CK and threat intelligence. Experience with SOAR or security automation. Relevant certifications such as Security+, SC-200, CySA+ or equivalent. Basic scripting skills ...

enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem. Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks. Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender … cloud security architecture, platform hardening, technical security controls and security baselines. Experience onboarding and validating infrastructure, cloud, application, identity and security telemetry. Experience developing KQL queries, analytics rules, workbooks, automation and threat-hunting content. Experience conducting technical risk assessments, security-control validation and vulnerability-remediation support. Experience with REST APIs ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

models and platform fundamentals (Azure, Snowflake, Kubecost desirable). Experience with FinOps practices and cost management tools, particularly Kubecost and cloud-native cost portals (KQL desirable). Demonstrated ability to work cross-functionally with Finance and technical teams to support cost visibility and decision-making. ...

About the Role We are seeking an experienced and hands-onSOC Manager/SOC Team Leadto establish, lead and continuously improve our internal Security Operations Centre (SOC) within a global enterprise organisation. The successful candidate ...