26 to 29 of 29 Permanent Kusto Query Language Jobs

Clearance. What youll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts to reduce false positives and improve SOC efficiency. Validate detections against telemetry … What youll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. ...

JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive analysis and threat evolution. Threat Intelligence & Enrichment Analyse threat intelligence feeds … Defender hands-on expertise SC-200 certification or willingness to achieve it Within commuting distance (~1 hour) of Canary Wharf, London Technical Skills Strong KQL skills for threat hunting and incident forensics Experience with SIEM, IDS/IPS and threat intelligence platforms Familiarity with incident response frameworks and security best ...

Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using KQL and intelligence-led techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. 🔐 Privacy Operations (1/3) Smarter Data Discovery … investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic Apps/Security Automation workflows What ...

frameworks Experience with cloud data platforms (ideally Microsoft Fabric) Familiarity with Power BI or similar BI tools Ability to optimise and troubleshoot query performance Strong … analytical and problem-solving skills Desirable Skills Knowledge of modern data architectures Experience with SQL, SSRS, SSIS and SSAS Experience using PySpark Familiarity with KQL Experience with data cataloguing tools Exposure to C# What you'll get in return Competitive Salary - £52,750 with a generous hybrid working policy. Pension ...