1 to 25 of 29 Permanent Kusto Query Language Jobs

/SIEM platforms (e.g., Elastic, Sentinel, Splunk), including query languages used for investigations and detections such as: Kusto Query Language (KQL) ES|QL Kibana Query Language Strong understanding of attacker tactics, techniques, and procedures (TTPs), including detecting indicators of compromise (IOCs) and knowing ...

Assist with monthly SOC reporting and contribute insights into customer security posture Support client service reviews and communicate cyber risks in clear, business-friendly language Conduct security assessments, including vulnerability testing and risk analysis Ensure timely, high-quality incident resolution in line with SOC standards and SLAs … responding to cyber security incidents Hands-on experience with SIEM, EDR, and email security tooling Experience working in a Microsoft XDR SOC Strong KQL (Kusto Query Language) skills Experience mentoring and supporting analysts at different levels Excellent written and verbal communication skills Strong analytical thinking, judgement ...

gaps and improve system observability. Support incident investigation and continuous service improvement. Manage monitoring configuration using Infrastructure as Code (Bicep) and version control. Develop KQL queries, dashboards and visualisations. Define monitoring standards, SLIs and SLOs where appropriate. Produce documentation and share knowledge across the engineering team. Essential Skills & Experience Significant … Grafana administration, dashboards and alerting. Experience with Microsoft Azure, including Azure Monitor, Application Insights and Log Analytics. Strong Kusto Query Language (KQL) skills. Experience monitoring Azure Integration Services, including Function Apps, Logic Apps, Service Bus and API Management. Experience integrating monitoring platforms with ITSM tools such ...

Cloud Hands-on experience with: Open-source and commercial deception/honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception) Advanced KQL for detection engineering and threat hunting at scale Detection-as-code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft ...

documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong Scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge ...

Ervaring met of kennis van: Microsoft Sentinel, Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Cloud, Entra ID/Azure AD, KQL, PowerShell of Python, SIEM/EDR/XDR/SOAR Kennis van MITRE ATT&CK, threat hunting of offensieve securitytechnieken Inzicht in aanvallersgedrag, malwareanalyse ...

Knowledge:* Working across hybrid cloud environments* CIS hardening & benchmark standards* Cloud and AI engineering capabilities* One or more of the following would be advantageous: KQL, Python, linux shell* Data regulations as they relate to IT systems* Data Visualisation skills* Secure enablement and governance of Microsoft Copilot and GenAI (Copilot ...

Senior Security Analyst Leeds | Hybrid Working | Microsoft Security | Defender XDR | Sentinel | KQL I'm working with an exciting new client looking to add several experienced Senior Security Analysts to a high-performing SOC team supporting a regulated enterprise environment. This is a genuinely hands-on SOC role where … holidays What you'll be doing Investigating and responding to complex cyber security incidents Threat hunting across Microsoft Defender XDR and Microsoft Sentinel Using KQL to investigate alerts and identify root cause Working closely with Infrastructure, Cloud and Security Engineering teams Running proactive security activities, including vulnerability scanning and security ...

root causes, MITRE/br/Kennis van de volgende domeinen is een pluspunt: cloudveiligheid (Azure/M365), ontwikkeling van Sentinel-use cases of KQL-query;s, basiskennis van scripting of automatisering (PowerShell, Python), ervaring met kwetsbaarheidsbeheer en integratie van dreigingsinformatie, kennis van post-incidentanalyse, pakketanalyse of geavanceerd/ ...

solutions SIEM tooling: Sentinel, Exabeam, Splunk, or equivalent Vulnerability management: Tenable or equivalent enterprise toolsets Scripting and automation: PowerShell (preferred), KQL, or similar Data Loss Prevention (DLP) solutions including MS Purview Compliance Manager Certified Information Systems Security Professional (CISSP), desirable CREST Practitioner Security Analyst (CPSA), desirable Palo Alto Networks Certified ...

runbooks. We’re looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs beneficial. ...

clear communication are key. Job Requirements AZ 500 certified (non negotiable) 3+ years hands on in Azure security Strong with: Microsoft Sentinel & Defender KQL Entra ID security controls Comfortable working independently and owning your domain Strong communication skills in English (Dutch is a plus) Job Responsibilities Own and manage cloud ...

runbooks. Were looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs beneficial. ...

reduce noise. Good understanding of data pipeline engineering, log enrichment, data quality and large-scale ingestion architectures. Strong knowledge of SPL; experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM ...

cloud log sources, designing efficient detections across multi-cloud environments (Gov. Cloud, AWS, Azure, GCP, etc). Designing and implementing detection logic (KQL, EQL, and/or SPL) tailored to cloud-native threats and cloud infrastructure (e.g., containers like Kubernetes, Docker, etc.). Analyzing threat intelligence to create and refine ...

client's SOC provider or SIEM platform Take ownership of all security incidents, validating indicators of compromise and determining impact Perform detailed investigations using KQL queries in Microsoft Sentinel and telemetry from across the security stack, going beyond initial triage to full root-cause analysis Reconstruct event chains and identify ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Logic Apps, Functions, and monitoring tools Strong capability in Infrastructure as Code using Bicep, Azure DevOps pipelines, and PowerShell Experience with dashboards, logging, and KQL queries Confidence working with multiple stakeholders, including external vendors xnkfpon and delivery partners A collaborative mindset with a focus on quality, stability, and continuous improvement ...

Microsoft Fabric-based solutions while collaborating closely with clients to ensure effective implementation and performance. The ideal candidate will have expertise in SQL, KQL, and Azure data services, alongside experience in modern data architectures. This position offers a remote-first work environment with occasional travel to London. #J-18808-Ljbffr ...

building and maintaining ETL or ELT pipelines Experience working directly with stakeholders Ability to gather requirements and translate them into technical solutions Experience with KQL, Synapse or Databricks would be beneficial What you'll get in return for your experience This Data Engineer role is offering a salary ...

Solid experience with Infrastructure as Code using Bicep, Azure DevOps pipelines and PowerShell Strong understanding of monitoring, logging and observability using Azure dashboards and KQL Confidence working with multiple application teams and third party delivery partners Comfortable xnkfpon working in agile or scrum based teams with a collaborative mindset What ...

MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such ...

MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic. ·Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such ...

MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such ...