10 of 10 Permanent Kusto Query Language Jobs in the East of England

QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/ ...

ServiceNow, Archer, MetricStream, or similar for control and remediation tracking.Experience with Microsoft security tooling (e.g., Defender for Endpoint, Intune, Sentinel) and/or KQL query writing is advantageous.Experience working in a large, global, matrixed organisation is an advantage.Skills & AttributesKnowledge of risk and compliance methodologies and cybersecurity fundamentals.Strong analytical, problem ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Sentinel, Defender XDR and Microsoft Purview, delivering scalable security solutions and improving detection coverage. The role requires hands-on experience with Sentinel analytics using KQL, Defender XDR capabilities, Azure security controls and IAM with Entra ID. #J-18808-Ljbffr ...

Analytics, Defender for Cloud)Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modellingSkilled in dashboards, log queries (KQL), custom metrics and performance analysisAbility to diagnose complex issues across infrastructure, networks, applications or databasesConfident scripting and automation skills (PowerShell, Azure Automation, Graph API)Clear communicator ...

security controls. Key Responsibilities Design, implement and optimise Microsoft Sentinel environments, including onboarding, configuration and continuous improvement Develop and tune Sentinel analytics rules using KQL, improving detection coverage and reducing false positives Support security monitoring, threat detection and incident investigation across enterprise environments Configure and enhance Microsoft Defender XDR capabilities … produce security documentation, recommendations and implementation plans Required Experience Strong commercial experience within Microsoft security engineering roles Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation Strong knowledge of Microsoft Defender XDR security capabilities Experience with Microsoft Purview DLP, sensitivity labels and information protection Strong understanding ...

capability What we’re looking for: Strong SOC/Security Operations experience Hands-on SIEM engineering experience Detection engineering and alert tuning Experience with KQL, SQL or similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and/or PowerShell Exposure ...

TTPs) and threat actor behaviours.Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection.Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.Practical knowledge of networks, operating systems, and scripting … TTPs) and threat actor behaviours.Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection.Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.Practical knowledge of networks, operating systems, and scripting ...

operational tooling such as GitHub & Jira, and incident collaboration tooling such as Zendesk & xMatters. Experience with a querying language such as SPL, KQL, SQL etc. in a Security Environment.Communication and influencing skills across engineering, product and security stakeholders; comfort guiding decisions under ambiguity and driving change. Familiarity with product … operational tooling such as GitHub & Jira, and incident collaboration tooling such as Zendesk & xMatters. Experience with a querying language such as SPL, KQL, SQL etc. in a Security Environment.Communication and influencing skills across engineering, product and security stakeholders; comfort guiding decisions under ambiguity and driving change. Familiarity with product ...