20 of 20 Kusto Query Language Jobs in England

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

What You'll Be Doing: Design, build and optimise detections across both Microsoft Sentinel and Elastic Stack Develop and maintain advanced detection content using KQL and EQL Lead end-to-end threat modelling exercises across Azure, AWS , applications, identities, APIs and cloud-native services Identify attack paths, control gaps … Threat Detection Strong hands-on experience with both: Microsoft Sentinel Elastic Stack (Elasticsearch, Kibana, Elastic Security) Demonstrable expertise writing and tuning detection content using: KQL (Kusto Query Language) EQL (Event Query Language) Proven experience delivering threat modelling across enterprise cloud platforms Deep understanding of attacker ...

Microsoft Sentinel and Microsoft Defender XDR . Experience with FortiSIEM or involvement in SIEM platform migrations. Knowledge of Kusto Query Language (KQL). Experience with Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

investigation and analytical skills. Desirable Banking, financial services or other regulated-sector experience. Microsoft Sentinel, Defender XDR, Defender for Identity or Defender for Cloud. KQL, PowerShell, Python or similar scripting/automation. Threat hunting, malware analysis and detection engineering. Azure and Microsoft 365 investigation experience. EnCase, FTK, Velociraptor, Volatility ...

scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation . This is a hands ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

incident response processes. Experience across enterprise networks, identity, endpoint security and cloud environments. Financial services experience and knowledge of Microsoft Sentinel, Defender XDR, KQL or forensic tools would be advantageous. Whats in it for you? Up to £675 per day, Inside IR35. London-based contract, with 3 days onsite ...

incident response processes. Experience across enterprise networks, identity, endpoint security and cloud environments. Financial services experience and knowledge of Microsoft Sentinel, Defender XDR, KQL or forensic tools would be advantageous. What's in it for you? Up to £675 per day, Inside IR35. London-based contract, with 3 days onsite ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

client. Desirable Relevant vendor or Microsoft security certification (e.g. SC-200, Zscaler, Cribl), though hands-on experience is the priority. Experience with KQL and with scripting or automation. Experience in a regulated or large enterprise environment. Familiarity with formal change governance, including change approval boards and maintenance windows. Networking People ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage improvement Cloud security engineering and scalable security architecture design Automation, SOAR ...

Python Developer 1-2 days a week on-site in London £450-£650 outside IR35 Requires Active SC Clearance The Role We are seeking an experienced Python Developer to join a growing engineering team delivering ...

Azure Cloud Security Engineer Hybrid 1day/wk Evaluate new security technologies and cloud services, performing engineering work and security analysis to determine if solutions should be pursued, and subsequently implementing them as required, focusing ...

Security Engineer (SIEM/XDR) - Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading ...

specific platforms is desirable rather than essential. We welcome applicants who have worked with other SIEM technologies. The following would also strengthen your application: KQL or similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra Using KQL and PowerShell as part of investigations and automation Acting as an escalation point for more junior analysts Contributing to improvements across SOC processes and detection … Microsoft Defender A good understanding of security incident investigation and response Knowledge of Windows environments and general networking/security principles Exposure to KQL would be beneficial A genuine desire to develop technically and progress within cyber security Working pattern Initially, the role will operate ...