1 to 25 of 101 Permanent Kusto Query Language Jobs in the UK

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

data transformations and normalisation processes to improve the quality and consistency of security telemetry. Design, develop and optimise Kusto Query Language (KQL) queries to support security monitoring and threat detection. Create, tune and maintain analytics rules, alerts and detection logic to strengthen security monitoring capabilities. Develop … integrating security telemetry into enterprise SIEM platforms. Strong understanding of log parsing, data normalisation and event correlation. Experience developing and optimising queries using KQL or equivalent SIEM query languages. Knowledge of threat detection, security use case development and alert tuning. Understanding of security monitoring, incident response and threat hunting ...

Compromise (IOCs) MITRE ATT&CK Framework Malware Analysis & Investigation Phishing Investigation & Response Vulnerability Management Additional Technical Knowledge Kusto Query Language (KQL) Windows & Linux Security Network Security Fundamentals Identity & Access Management (IAM) Microsoft Entra ID (Azure AD) Microsoft 365 Security Azure & AWS Security Monitoring Cloud Security Fundamentals PowerShell ...

incidents and service improvement Build and improve meaningful alerts, dashboards and observability using Azure Monitor, Log Analytics and Kusto Query Language (KQL). Investigate complex incidents, coordinate resolution with the MSP and other teams, and document root causes and preventive actions. Maintain operational runbooks and contribute … ownership and continuous improvement. Experience with infrastructure as code (Bicep, Terraform or ARM) and/or Python or Bash automation. Exposure to Microsoft Sentinel, KQL workbooks or security alert tuning alongside a SOC. Experience with hybrid virtualisation or SaaS integrations such as Salesforce. Experience in a regulated environment, ideally ...

with Microsoft Azure, Sentinel, Defender, and related tools. Deep experience with: Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks Kusto Query Language (KQL) or similar Complex JSON data structures Development tools, including Git, IDEs, and CI/CD pipelines Expert scripting skills in Python, Ruby, or similar languages. ...

enhance visibility, resilience, and incident response effectiveness. Experience in conducting security investigations using large datasets , with knowledge of Kusto Query Language (KQL) to develop custom Sentinel queries and analytics rules. Solid understanding of enterprise IT infrastructure , including Windows and Linux operating systems, networking, and third‐party security ...

Microsoft Sentinel and Microsoft Defender XDR . Experience with FortiSIEM or involvement in SIEM platform migrations. Knowledge of Kusto Query Language (KQL). Experience with Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding ...

Azure and Intune. Experience in threat hunting, detection engineering and advanced security investigations, including the use of Kusto Query Language (KQL). Understanding of security automation and the development or optimisation of detection rules, analytics and investigation processes. Broad knowledge of modern security architecture, including cloud platforms ...

Infrastructure-as-Code experience (Terraform or similar). Scripting skills in Python and/or Bash Comfortable troubleshooting distributed systems, data pipelines, and query performance. Equally fluent talking to engineers and executive stakeholders. Startup or high-growth experience, you know how to move fast and make calls without … asked. Bonus Points Background in a SOC, Security Engineering, Incident Response, or Threat Hunting role. Experience implementing or supporting SIEMs at scale Familiarity with KQL (Kusto Query Language). #J-18808-Ljbffr ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

support. Experience applying Detection-as-Code, CI/CD, source control, and peer-review practices. Technical Knowledge and Skills Advanced Microsoft Sentinel administration, architecture, KQL, analytics rules, hunting, workbooks, watchlists, playbooks, and optimisation. Azure Monitor Agent, Azure Arc, Data Collection Rules, Log Analytics, custom tables, parsers, and custom ingestion. Windows ...

Copilot) responsibly. Monitoring, Reliability & Resilience Enhance and tune monitoring/alerting with Azure Monitor, Log Analytics, Application Insights, alert rules, and action groups; write KQL for investigation and reporting. Perform root-cause analysis and problem management, addressing root causes through code and configuration improvements. Support backup, restore, and disaster-recovery ...

MSSP, consultancy, financial services, critical infrastructure, or other highly regulated environment. Experience with threat intelligence platforms, malware analysis, scripting, or automation using PowerShell, Python, KQL, or similar technologies. Experience developing threat hunts, response playbooks, detection rules, or security orchestration and automation workflows. Experience with Microsoft security technologies such as: Microsoft ...

Skills & Experience: Hands‐on experience with: Open‐source and commercial deception/honeypot platforms (e.g., Thinkst Canary, T‐Pot, Cowrie, OpenCanary, Zscaler Deception) Advanced KQL for detection engineering and threat hunting at scale Detection‐as‐code, CI/CD of detection content, and security content management Strong knowledge of adversary ...

translate architecture and security standards into practical engineering solutions. Strong communication, documentation and stakeholder-engagement skills. Desirable Experience: Microsoft Sentinel, Log Analytics/KQL, Defender for Identity, Defender for Cloud Apps or Copilot for Security. Microsoft Graph, Python, Logic Apps, Azure Functions, policy-as-code, infrastructure-as-code or advanced ...

platforms, including IBM QRadar, Microsoft Sentinel and LogRhythm In-depth experience with Microsoft Sentinel, including use case and rule development, workbook/playbook creation, KQL & Logic Apps/SOAR Experience in managing Microsoft Sentinel as an MSSP, including Lighthouse, and management and multi-customer environments using DevOps How this aligns ...

cyber investigations. Desirable Experience in banking, financial services or another regulated environment. Experience with threat intelligence, malware analysis, scripting or automation using PowerShell, Python, KQL or similar languages. Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows. Knowledge of Microsoft security technologies such as Sentinel ...

considerations relevant to cyber investigations.DesirableExperience in banking, financial services or another regulated environment.Experience with threat intelligence, malware analysis, scripting or automation using PowerShell, Python, KQL or similar languages.Experience developing detection rules, response playbooks, threat hunts or security orchestration and automation workflows.Knowledge of Microsoft security technologies such as Sentinel, Defender ...

they impact critical business assets. Ability to read and interpret cloud configuration exports, scripts and tooling outputs (e.g. PowerShell, Azure CLI, AWS CLI, KQL). Experience identifying and assessing cloud and cyber risks within complex environments, with the ability to communicate technical findings and business implications to both technical ...

government). Knowledge of secure system integration and API security. Strong working knowledge of SOC processes and SIEM engineering, preferably using Microsoft Sentinel (KQL, analytics rule tuning, workbooks, automation) and Microsoft Defender security tools. Understanding of supply chain security risks. SC clearance. QUALIFICATIONS & CERTIFICATIONS Degree in Cyber Security ...

cataloguing and lineage use cases. Skills & Competencies Ability to configure and manage Purview policies and scanning tools. Strong analytical and troubleshooting skills. Familiarity with KQL, PowerShell, or Microsoft Graph. Ability to interpret logs, alerts, and governance reporting. Strong documentation and verbal communication skills. Ability to work collaboratively with cross functional ...

teams.* Improve developer experience through platform automation and standardisation.* Monitor and improve platform health using Azure observability tooling (e.g., Azure Monitor, Log Analytics/KQL, Application Insights, Science Logic), and improve alerting and diagnostics.* Drive cloud financial governance through FinOps practices including rightsizing, reserved instances, savings plans, storage lifecycle management ...

enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem. Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks. Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender … cloud security architecture, platform hardening, technical security controls and security baselines. Experience onboarding and validating infrastructure, cloud, application, identity and security telemetry. Experience developing KQL queries, analytics rules, workbooks, automation and threat-hunting content. Experience conducting technical risk assessments, security-control validation and vulnerability-remediation support. Experience with REST APIs ...

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...