3 of 3 Permanent Kusto Query Language Jobs in the City of Westminster

support. Experience applying Detection-as-Code, CI/CD, source control, and peer-review practices. Technical Knowledge and Skills Advanced Microsoft Sentinel administration, architecture, KQL, analytics rules, hunting, workbooks, watchlists, playbooks, and optimisation. Azure Monitor Agent, Azure Arc, Data Collection Rules, Log Analytics, custom tables, parsers, and custom ingestion. Windows ...

MSSP, consultancy, financial services, critical infrastructure, or other highly regulated environment. Experience with threat intelligence platforms, malware analysis, scripting, or automation using PowerShell, Python, KQL, or similar technologies. Experience developing threat hunts, response playbooks, detection rules, or security orchestration and automation workflows. Experience with Microsoft security technologies such as: Microsoft ...

enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem. Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks. Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender … cloud security architecture, platform hardening, technical security controls and security baselines. Experience onboarding and validating infrastructure, cloud, application, identity and security telemetry. Experience developing KQL queries, analytics rules, workbooks, automation and threat-hunting content. Experience conducting technical risk assessments, security-control validation and vulnerability-remediation support. Experience with REST APIs ...