26 to 50 of 105 Kusto Query Language Jobs in the UK

government). Knowledge of secure system integration and API security. Strong working knowledge of SOC processes and SIEM engineering, preferably using Microsoft Sentinel (KQL, analytics rule tuning, workbooks, automation) and Microsoft Defender security tools. Understanding of supply chain security risks. SC clearance. QUALIFICATIONS & CERTIFICATIONS Degree in Cyber Security ...

cataloguing and lineage use cases. Skills & Competencies Ability to configure and manage Purview policies and scanning tools. Strong analytical and troubleshooting skills. Familiarity with KQL, PowerShell, or Microsoft Graph. Ability to interpret logs, alerts, and governance reporting. Strong documentation and verbal communication skills. Ability to work collaboratively with cross functional ...

teams.* Improve developer experience through platform automation and standardisation.* Monitor and improve platform health using Azure observability tooling (e.g., Azure Monitor, Log Analytics/KQL, Application Insights, Science Logic), and improve alerting and diagnostics.* Drive cloud financial governance through FinOps practices including rightsizing, reserved instances, savings plans, storage lifecycle management ...

enterprise security controls across Azure, Microsoft Entra ID and the Microsoft security ecosystem. Engineer and maintain Microsoft Sentinel capabilities, including data connectors, analytics rules, KQL queries, workbooks, watchlists, automation rules and playbooks. Design, implement and optimise Microsoft Defender capabilities, including Defender for Endpoint, Defender for Identity, Defender for Cloud, Defender … cloud security architecture, platform hardening, technical security controls and security baselines. Experience onboarding and validating infrastructure, cloud, application, identity and security telemetry. Experience developing KQL queries, analytics rules, workbooks, automation and threat-hunting content. Experience conducting technical risk assessments, security-control validation and vulnerability-remediation support. Experience with REST APIs ...

Skills and Experience required: Have a high level of ability to create and develop security orchestration and automated response (SOAR). Strong proficiency in KQL and detection engineering Experience and working knowledge with operating systems - both Linux and Windows platforms Extensive knowledge of Azure including Azure functions and Logic Apps. ...

troubleshooting and operational support Experience applying Detection-as-Code, CI/CD, source control and peer-review practices Technical Skills: Microsoft Sentinel Identity Cloud KQL Analytics Rules Hunting Workbooks Playbooks Data Collection Rules Custom Tables Parsers Custom Ingestion Windows Event Forwarding and Collection XPath Filtering Windows Event IDs Sysmon PowerShell ...

approximately once every five weeks). Preferred Qualifications, Capabilities, and Skills Experience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent). Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling. ...

technologies. Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST). Previous involvement in security audits, risk assessments or policy development. KQL or other scripting/automation skills beyond PowerShell. Advanced M365 and Azure backup/disaster recovery experience. Experience working in a global or multi‐site ...

technologies.* Awareness of data protection principles and security frameworks (e.g. ISO 27001, NIST).* Previous involvement in security audits, risk assessments or policy development.* KQL or other scripting/automation skills beyond PowerShell.* Advanced M365 and Azure backup/disaster recovery experience.* Experience working in a global or multi-site ...

response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. If you think this role is a fit, we'd love to hear from you. Reference ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

tooling and services we use and the backing to implement this. You’ll be an innovative collaborator with strong technical skills, particularly in using KQL and excellent communication skills, with an appetite for complex problem solving. Seize the opportunity to join a dynamic security team, reporting to the Head ...

Defender across endpoint, identity, Office 365, and cloud apps, including triage and tuning of Defender alerts. Microsoft Sentinel, including writing and tuning your own KQL queries, analytic rules, and workbooks. Microsoft Entra ID and Conditional Access policy design, testing, and troubleshooting. Microsoft Purview, Intune security controls, email security, and endpoint ...

best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously Desirable Skills Experience with Microsoft Defender technologies Knowledge of KQL and detection rule development Previous experience within highly regulated or large enterprise environments Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.) Contract ...

macOS, Linux, Windows) investigation experience; IDS, IPS, EDR, and basic malware analysis Basic understanding of at least one of the following: OSQuery, SQL, and KQL Knowledge of frameworks such as MITRE Attack and Cyber Kill Chain Ability to work some weekends and holidays Experience with Windows and Linux command ...

security operations workflows: alert triage, incident handling, and vulnerability/finding remediation lifecycles Comfort with scripting to support automation and tooling (e.g. Python, KQL) Experience coordinating remediation across multiple engineering or platform teams, and keeping work moving to closure Working knowledge of cloud environments (e.g. AWS, Azure ...

500. Hands‐on experience with other SIEM and EDR/XDR platforms such as CrowdStrike, Splunk, QRadar, Rapid7 or Elastic. Experience with KQL, Sigma, Logic Apps, PowerShell or other automation and detection‐as‐code approaches. Knowledge of MITRE ATT&CK, NIST SP 800-61, NCSC CAF and recognised security operations … SIEM, EDR/XDR or protective monitoring transformations. Deep practical design experience with Microsoft Sentinel, Defender XDR and Defender for Endpoint, including Log Analytics, KQL, data connectors, analytics and automation. Full lifecycle delivery experience from discovery and HLD/LLD development through migration, testing, service transition and implementation assurance. Experience ...

will help you find ways to work more efficiently, while using your own judgement to check their output. Experience with Intune, Autopilot, Defender, PowerShell, KQL, SQL Server, Salesforce or security certification evidence would be useful. You don’t need experience with all of these to apply. What’s on offer ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

rehosting, re‐platforming and refactoring, not just lift and shift. Infrastructure as Code and automation: Strong Terraform skills, plus scripting in PowerShell, Bash, SQL, KQL and Packer. Experience with Azure DevOps YAML pipelines and CI/CD is essential, including building security and code quality tools into those pipelines. Containers ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

Engineer or SOC Engineer Experience with Microsoft Sentinel and other SIEM solutions (Splunk, Rapid7, LogRhythm, McAfee or equivalent) Strong analytical mindset with hands-on KQL experience and familiarity with related Microsoft Security technologies Ability to lead and design automation and scripting within SIEM tooling Experience analysing cloud security risks ...

scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation . This is a hands ...