3 of 3 Kusto Query Language Jobs in the North West

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation Security telemetry across endpoint, identity, cloud and network environments Detection tuning, validation and false-positive reduction Detection ...

experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environments Foundational understanding of common ...