4 of 4 Remote/Hybrid Kusto Query Language Jobs in the East of England

QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/ ...

ServiceNow, Archer, MetricStream, or similar for control and remediation tracking.Experience with Microsoft security tooling (e.g., Defender for Endpoint, Intune, Sentinel) and/or KQL query writing is advantageous.Experience working in a large, global, matrixed organisation is an advantage.Skills & AttributesKnowledge of risk and compliance methodologies and cybersecurity fundamentals.Strong analytical, problem ...

capability What we’re looking for: Strong SOC/Security Operations experience Hands-on SIEM engineering experience Detection engineering and alert tuning Experience with KQL, SQL or similar query languages Linux experience Threat hunting and incident response experience Scripting/automation using Python and/or PowerShell Exposure ...

TTPs) and threat actor behaviours.Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection.Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.Practical knowledge of networks, operating systems, and scripting … TTPs) and threat actor behaviours.Proficiency in SIEM/XDR platforms and tuning detection logic, use cases, and alert optimisation.Advanced querying and scripting skills (e.g., KQL, SPL) for data analysis and threat detection.Ability to recommend tooling enhancements and process improvements to strengthen SOC capability.Practical knowledge of networks, operating systems, and scripting ...