26 to 42 of 42 Kusto Query Language Jobs in the South West

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

with and responding to escalated and most high profile incidents. Comprehensive knowledge and experience utilising/fine-tuning the Microsoft Security stack – Defender, Sentinel, KQL, etc. Experience working in hybrid-cloud SOC environments – Azure/AWS preferably. Ability to articulate specific projects that you have built, developed or led on More ❯

Key Requirements: At least 4 years of experience in a SOC environment, handling high-profile incidents. Strong knowledge of Microsoft Security tools: Defender, Sentinel, KQL, etc. Experience with hybrid-cloud SOC environments, preferably Azure and AWS. Proven projects in SecOps Engineering and Automation. If you are an experienced SecOps Specialist More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

Privileged Access Management (PAM) tools such as CyberArk and/or IGA platforms like SailPoint ISC is advantageous. General proficiency in Microsoft tooling, PowerShell, KQL, Copilot etc. Certifications (Preferred) Microsoft Certified: Identity and Access Administrator Associate Other relevant Microsoft or security certifications Soft Skills Strong problem-solving and analytical abilities. More ❯

content autonomously. Build relationships outside the HMG community with external SOCs and cybersecurity researchers to identify beneficial analytics, tradecraft, and threat intelligence. Develop complex KQL analytics and playbooks for detection rules against M365 environments and host-based analytics for Linux and Windows VMs. Review open-source research on threats impacting … detection rules. Use of statistical methods for anomaly detection. Advanced practical experience with Microsoft Sentinel and/or Microsoft XDR. Proficiency in writing complex KQL analytics/searches. Strong awareness of the latest security threats. Ability to prioritize threats and assess detection effectiveness. Threat hunting or SOC analyst certifications are More ❯

both communicating suggestions for funding/prioritisation to technical lead, and working as lead implementor when required. Development of new complex and anomaly-based KQL analytics, and associated playbooks that result in creation of bespoke detection rules/analytics against M365 environments, plus host-based analytics for Linux and Windows … statistical methods to find anomalies in data Advanced Practical use of Microsoft Sentinel and/or Microsoft XDR Competent in writing med-highly complex KQL analytics/searches Strong knowledge of latest threats in security Ability to prioritise threats Determine factors that contribute to a detection's effectiveness Threat hunting More ❯

leading cybersecurity research projects Proficiency in programming languages such as Python, C#, C++ Experience with large datasets and query languages like SQL or KQL Strong interpersonal and communication skills Other Requirements Ability to pass Microsoft security background checks Experience with Microsoft Cloud security research, threat hunting, and detection Experience More ❯

Security Operations Specialist, Cheltenham Client: Lawrence Harvey Location: Fully Remote Job Category: Other EU work permit required: Yes Job Views: 1 Posted: 06.06.2025 Expiry Date: 21.07.2025 Job Description: Security Operations Specialist Salary: £75-85k + Bonus + Benefits We More ❯