101 to 108 of 108 Kusto Query Language Jobs in the UK

bench of analysts who can operate at the same standard. Key responsibilities Set the detection engineering standard — author, tune, and peer‐review detections in KQL, SPL, EQL, or Sigma; manage the false‐positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune … Security Manager (CISM) CompTIA Advanced Security Practitioner (CASP+) Experience leading detection engineering in a SOC or similar environment— including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application‐level telemetry from ...

threat hunting and identifying potential security risks Supporting vulnerability assessment and remediation Working across the Microsoft security stack, including Sentinel, Defender and Entra Using KQL and PowerShell as part of investigations and automation Acting as an escalation point for more junior analysts Contributing to improvements across SOC processes and detection … Microsoft Defender A good understanding of security incident investigation and response Knowledge of Windows environments and general networking/security principles Exposure to KQL would be beneficial A genuine desire to develop technically and progress within cyber security Working pattern Initially, the role will operate ...

ESSENTIAL SKILLS * Strong hands-on Azure infrastructure experience. * Experience writing Terraform configurations and reusable modules. * Practical Application Insights experience and the ability to write KQL queries for troubleshooting. * Experience implementing observability, monitoring and alerting. * Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. * CI/… required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes ...

remediation planning, reporting, and automation. Security incident triage, investigation, and response. Microsoft Defender, Entra ID/Active Directory, Conditional Access, and related controls. SIEM query building and KQL. Ransomware resilience, including backup and network segmentation. Cyber Essentials Plus and wider security maturity initiatives. AI, Copilot, Purview, and data security … incident response, and security operations. Microsoft security experience, especially Defender and identity/security controls. SIEM experience and confidence writing or working with queries. KQL is desirable. Someone who is self-sufficient, curious, and comfortable improving processes rather than simply following them. CompTIA Security+ or an equivalent baseline certification. Package ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … working as a: Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package 4 on/4 off 12-hour shifts Home-based night shifts Private medical cover ...

Gravitas Group in London is seeking a Cyber Security Engineer to lead and implement security controls across the organisation. This 12-month FTC focuses on hardening the security posture, delivering projects, and ensuring systems remain ...

We’re looking for a Senior Application Security Engineer to join our expanding Information Security team. If you are a hands‐on AppSec expert who enjoys working deep in the SDLC, partnering with talented engineers ...

operational tooling such as GitHub & Jira, and incident collaboration tooling such as Zendesk & xMatters. Experience with a querying language such as SPL, KQL, SQL etc. in a Security Environment. Communication and influencing skills across engineering, product and security stakeholders; comfort guiding decisions under ambiguity and driving change. Familiarity with ...