2 of 2 Kusto Query Language Jobs in Bristol

bench of analysts who can operate at the same standard. Key Responsibilities Set the detection engineering standard - author, tune, and peer-review detections in KQL, SPL, EQL, or Sigma; manage the false-positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune … Security Manager (CISM) CompTIA Advanced Security Practitioner (CASP+) Experience leading detection engineering in a SOC or similar environment - including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application-level telemetry from ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Incident Response Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package £48,654.60 base salary £9,965.40 shift allowance 4 on/4 off 12-hour ...