1 to 25 of 54 Remote/Hybrid Kusto Query Language Jobs in the UK

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

with Microsoft Azure, Sentinel, Defender, and related tools. Deep experience with: Sentinel Incidents, Workbooks, Hunting Queries, and Notebooks Kusto Query Language (KQL) or similar Complex JSON data structures Development tools, including Git, IDEs, and CI/CD pipelines Expert scripting skills in Python, Ruby, or similar languages. ...

Microsoft Sentinel and Microsoft Defender XDR . Experience with FortiSIEM or involvement in SIEM platform migrations. Knowledge of Kusto Query Language (KQL). Experience with Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding ...

Azure and Intune. Experience in threat hunting, detection engineering and advanced security investigations, including the use of Kusto Query Language (KQL). Understanding of security automation and the development or optimisation of detection rules, analytics and investigation processes. Broad knowledge of modern security architecture, including cloud platforms ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

support. Experience applying Detection-as-Code, CI/CD, source control, and peer-review practices. Technical Knowledge and Skills Advanced Microsoft Sentinel administration, architecture, KQL, analytics rules, hunting, workbooks, watchlists, playbooks, and optimisation. Azure Monitor Agent, Azure Arc, Data Collection Rules, Log Analytics, custom tables, parsers, and custom ingestion. Windows ...

MSSP, consultancy, financial services, critical infrastructure, or other highly regulated environment. Experience with threat intelligence platforms, malware analysis, scripting, or automation using PowerShell, Python, KQL, or similar technologies. Experience developing threat hunts, response playbooks, detection rules, or security orchestration and automation workflows. Experience with Microsoft security technologies such as: Microsoft ...

Skills & Experience: Hands‐on experience with: Open‐source and commercial deception/honeypot platforms (e.g., Thinkst Canary, T‐Pot, Cowrie, OpenCanary, Zscaler Deception) Advanced KQL for detection engineering and threat hunting at scale Detection‐as‐code, CI/CD of detection content, and security content management Strong knowledge of adversary ...

translate architecture and security standards into practical engineering solutions. Strong communication, documentation and stakeholder-engagement skills. Desirable Experience: Microsoft Sentinel, Log Analytics/KQL, Defender for Identity, Defender for Cloud Apps or Copilot for Security. Microsoft Graph, Python, Logic Apps, Azure Functions, policy-as-code, infrastructure-as-code or advanced ...

cataloguing and lineage use cases. Skills & Competencies Ability to configure and manage Purview policies and scanning tools. Strong analytical and troubleshooting skills. Familiarity with KQL, PowerShell, or Microsoft Graph. Ability to interpret logs, alerts, and governance reporting. Strong documentation and verbal communication skills. Ability to work collaboratively with cross functional ...

teams.* Improve developer experience through platform automation and standardisation.* Monitor and improve platform health using Azure observability tooling (e.g., Azure Monitor, Log Analytics/KQL, Application Insights, Science Logic), and improve alerting and diagnostics.* Drive cloud financial governance through FinOps practices including rightsizing, reserved instances, savings plans, storage lifecycle management ...

enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem. Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks. Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender … cloud security architecture, platform hardening, technical security controls and security baselines. Experience onboarding and validating infrastructure, cloud, application, identity and security telemetry. Experience developing KQL queries, analytics rules, workbooks, automation and threat-hunting content. Experience conducting technical risk assessments, security-control validation and vulnerability-remediation support. Experience with REST APIs ...

response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love to hear from you. Reference ...

cloud platforms, SaaS, and internal systems. Documenting security processes, tool configurations, and contributing to service delivery documentation. Supporting colleagues with ISO 27001 compliance and KQL-related tasks. What we are looking for: Previously worked as a Threat Detection Engineer or in a similar role. Must have strong expertise in KQL.Hands ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

tooling and services we use and the backing to implement this. You’ll be an innovative collaborator with strong technical skills, particularly in using KQL and excellent communication skills, with an appetite for complex problem solving. Seize the opportunity to join a dynamic security team, reporting to the Head ...

best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously Desirable Skills Experience with Microsoft Defender technologies Knowledge of KQL and detection rule development Previous experience within highly regulated or large enterprise environments Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.) Contract ...

macOS, Linux, Windows) investigation experience; IDS, IPS, EDR, and basic malware analysis Basic understanding of at least one of the following: OSQuery, SQL, and KQL Knowledge of frameworks such as MITRE Attack and Cyber Kill Chain Ability to work some weekends and holidays Experience with Windows and Linux command ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

environment. Key Skills & Experience: Strong background in Security Engineering, SOC, Detection Engineering, or Incident Response Hands-on experience with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience ...

security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles Comfort with scripting to support automation and tooling (e.g. Python, KQL) Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure Working knowledge of cloud environments (e.g. AWS, Azure ...

cleansing data with limited guidance. You can present analysis and visualisations in clear ways to communicate complex messages. You can write SQL or KQL queries and know how to extract data using SQL or KQL. You can work with others to identify areas for improvement and simplify processes ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...