2 of 2 Remote Kusto Query Language Jobs in Scotland

alerting and automation across Azure logging and IaaS/PaaS/SaaS workloads Integrate Azure EventHubs, Log Analytics and a strong knowledge of Kusto Query Language (KQL) as well as Splunk Processing Language (SPL) to optimise data pipelines and detection engineering About the Candidate: Understanding of microservices architecture, Azure Logic Apps and DevSecOps Contribute to security More ❯

a major financial services client. As a Microsoft Sentinel Engineer, you will design, implement, and optimise Sentinel solutions across enterprise environments. You will connect multiple data sources, write complex KQL queries, build automation playbooks, and work closely with clients to strengthen their security operations and response capabilities. This is a technically advanced role that combines engineering depth with real client … SIEM solutions for enterprise clients. Develop and optimise automation rules, playbooks, and runbooks using Logic Apps and Power Automate. Write and fine-tune Kusto Query Language (KQL) queries to analyse and visualise raw security data. Integrate third-party tools (firewalls, IAM, telemetry) into Sentinel. Use MITRE ATT&CK to anticipate and counter adversarial activity. Apply cost-optimisation … What We Are Looking For 3+ years experience as a Microsoft Sentinel or SIEM Engineer. Strong technical background across Microsoft 365, Azure, networking, and cybersecurity. Hands-on experience with KQL, PowerShell, and ideally Python. Proven experience automating processes using Logic Apps, Playbooks, or Terraform. Understanding of encryption, data protection, and incident response. Confident communicator, capable of working in client-facing More ❯