3 of 3 Remote/Hybrid Kusto Query Language Jobs in the South East

operations (coverage management, escalation handling, policy tuning). Familiarity with Microsoft Defender suite and/or Microsoft Sentinel. Scripting/automation skills (PowerShell, KQL, Python). Knowledge of ransomware recovery patterns (immutable backups, restore validation, offline documentation). Exposure to audit/compliance requirements (ISO 27001, NIST, CIS) and evidence ...

design experience in ICS and/or cybersecurity. Exposure to tools like MDIoT, Sentinel, Wireshark, Nessus, or Splunk. Knowledge of data analysis and scripting (KQL, Python, PowerShell, or Bash) Please note that roles based out of SJS or Sunbury will move to Timber Square, Southwark, from Q4 2027. Why join ...

Clearance. What youll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts to reduce false positives and improve SOC efficiency. Validate detections against telemetry … What youll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. ...