13 of 13 Remote/Hybrid Kusto Query Language Jobs in London

repetitive security activities and operational processes. Use PowerShell and other scripting technologies to support security administration and investigation. Develop skills across Microsoft Graph API, KQL, Azure CLI, Logic Apps and security automation. Support the development of Sentinel automation rules and playbooks. Contribute to improving security monitoring, detection and response processes. … cloud and hybrid security. Desirable Experience Experience in any of the following would be advantageous: Microsoft Sentinel and Kusto Query Language (KQL). Microsoft Defender XDR, Defender for Endpoint or Defender for Identity. Microsoft Defender for Cloud and Cloud Security Posture Management. Entra ID security, including Conditional ...

expertise in a fast-paced, collaborative environment. What You'll Do: Own and Enhance Detection Content:Autonomously develop, test, andmaintainhigh-fidelity detection logic in KQL for the Microsoft Sentinel environment. You will own a portfolio of content, ensuring its long-term effectiveness and performance. Conduct Advanced Tuning & Optimization:Perform independent … creation. Deep, hands-onexpertisewith the Microsoft security stack, including Microsoft Sentinel, Microsoft 365 Defender, and Logic Apps. Highproficiencyin Kusto Query Language (KQL), with proven experience writing complex, optimized queries for detection and hunting. Strong,demonstratedexperience automating security workflowsusing SOAR platforms, APIs, or scripting languages (Python, PowerShell). ...

Skills & Experience: Hands‐on experience with: Open‐source and commercial deception/honeypot platforms (e.g., Thinkst Canary, T‐Pot, Cowrie, OpenCanary, Zscaler Deception) Advanced KQL for detection engineering and threat hunting at scale Detection‐as‐code, CI/CD of detection content, and security content management Strong knowledge of adversary ...

translate architecture and security standards into practical engineering solutions. Strong communication, documentation and stakeholder-engagement skills. Desirable Experience: Microsoft Sentinel, Log Analytics/KQL, Defender for Identity, Defender for Cloud Apps or Copilot for Security. Microsoft Graph, Python, Logic Apps, Azure Functions, policy-as-code, infrastructure-as-code or advanced ...

Networking, Security, Data) Strong hands-on experience with Kubernetes, Docker, and container orchestration Expertise in Infrastructure as Code (Terraform) and scripting (PowerShell, Bash, SQL, KQL) Proven delivery of CI/CD pipelines (Azure DevOps YAML essential) Experience implementing security tooling (SAST, DAST, container scanning, WAF) Strong knowledge of cloud security ...

Enterprise architecture frameworks (TOGAF, SABSA, or equivalent)Strong understanding of data classification models, and risk scoringAbility to design and optimise enterprise Purview deploymentsKnowledge of KQL, PowerShell, and Microsoft Graph is a plus.Capability to analyse unstructured and structured data estatesAbility to lead technical teams and influence senior leadershipAbility to work across ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading ...

Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and security assurance within enterprise environments. #J ...

Security Engineer (SIEM/XDR) Microsoft Sentinel, Defender, Endpoint, Detection Engineering, Detection-as-Code, KQL, Security Automation, SOAR, Playbooks, Telemetry, Cloud Security, APIs, CI/CD, Infrastructure-as-Code, Python, PowerShell, Windows, Linux, London (Hybrid) This is an exceptional permanent Security Engineer (SIEM/XDR) opportunity to join a leading … engineering or detection engineering experience Hands-on SIEM and XDR tooling, ideally Microsoft Sentinel and Microsoft Defender for Endpoint Detection engineering, detection-as-code, KQL, security content and alert logic Security telemetry, logging pipelines, data quality and telemetry coverage improvement Cloud security engineering and scalable security architecture design Automation, SOAR ...

take ownership of security improvements, detection capabilities, and automation across client environments. Responsibilities: Design, implement and optimise security controls. Develop detection capabilities using KQL and Advanced Hunting. Build and maintain Microsoft Sentinel analytical rules. Deploy and manage Content Hub solutions. Tune Microsoft Defender and wider threat policies. Manage phishing simulation … Functions and codeless playbooks where appropriate. Skills/Must Have: Extensive Security Engineering or Senior Security Analysis experience. Strong Microsoft Defender XDR experience. Strong KQL and Advanced Hunting knowledge. Microsoft Sentinel experience. Experience with vulnerability scanning and risk analysis. Strong understanding of security protocols and industry standards. Ability to interpret ...

Gravitas Group in London is seeking a Cyber Security Engineer to lead and implement security controls across the organisation. This 12-month FTC focuses on hardening the security posture, delivering projects, and ensuring systems remain ...

We’re looking for a Senior Application Security Engineer to join our expanding Information Security team. If you are a hands‐on AppSec expert who enjoys working deep in the SDLC, partnering with talented engineers ...

threat-informed research, design scalable automation for onboarding and enrichment, and advise clients on detection logic with strong MS security stack skills and deep KQL expertise. #J-18808-Ljbffr ...