51 to 75 of 108 Kusto Query Language Jobs in the UK

scale medical research. You will work closely with engineering, architecture and cloud teams to integrate security throughout the software development lifecycle. Microsoft Azure and KQL experience are essential , alongside relevant experience in CI/CD, Kubernetes, API security, security-as-code and security automation . This is a hands ...

Microsoft Fabric solutions: OneLake, Lakehouse, Warehouse, Data Factory pipelines, Dataflows Gen2, Notebooks (PySpark/Spark SQL), Real-Time Intelligence (Eventstreams, Eventhouse/KQL) and Power BI + Power BI CoPilotDesign governance, security and operating frameworks: data governance with Microsoft Purview, sensitivity labels, RLS/OLS, identity and access models, tenant ...

Experience within the NHS or wider public sector would be valuable, as would exposure to Oracle Fusion or HCM security, ServiceNow, major programme transitions, KQL, scripting or security across AWS and Google Cloud. Relevant certifications may include SC-100, SC-200, AZ-500, CISSP, CISM, TOGAF, SABSA or NCSC Certified ...

VirusTotal, ANY.RUN, Shodan, Qevlar, Vectra AI, Tracebit or Thinkst Canary as part of investigations, threat hunting or security validation. Ability to query in KQL, CQL, S1QL, XQL or similar languages, and to improve detections, dashboards, runbooks or detection logic. Hands‐on technical certifications, particularly those assessed through practical labs ...

lead security operations, detections, and the three-analyst team, troubleshooting issues and guiding engineering teams. Essential experience includes security engineering/operations, Microsoft Sentinel, KQL, incident response on cloud platforms, and IaC with Terraform/Bicep. #J-18808-Ljbffr ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications Additional Information Belonging at The AA At The AA, we value the unique perspectives, experiences ...

external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications Belonging at The AA At The AA, we value the unique perspectives, experiences and ideas ...

Data Warehouse using SSIS (essential) Experience supporting Azure Data Factory, Data Lake, Event Hub and Databricks. (essential) Ability to understand and write T-SQL, Kusto, Python coding languages. (essential) Experience of supporting PowerBI, Business Objects reports. Communicates clearly and is skilled at adapting their communication style to meet ...

experience at Level 3 SOC Analyst or senior security operations level Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint (MDE) and KQL Experience onboarding, configuring, tuning and reporting on SIEM solutions Threat intelligence experience Leadership and mentoring experience Commercial experience in security monitoring and/or penetration … Cyber Security master's with relevant experience is also considered Desirable In-depth Microsoft Sentinel expertise: use case and rule development, workbooks and playbooks, KQL, Logic Apps and SOAR Managing Sentinel as an MSSP, including Azure Lighthouse and multi-customer environments using DevOps Wider Microsoft security experience across Defender ...

Sentinel, Defender XDR and Microsoft Purview, delivering scalable security solutions and improving detection coverage. The role requires hands-on experience with Sentinel analytics using KQL, Defender XDR capabilities, Azure security controls and IAM with Entra ID. #J-18808-Ljbffr ...

Required Proven experience in Security Operations or Cyber Security. Hands‐on experience with Splunk, log forwarding and SIEM administration. Strong analytical skills using SPL, KQL and/or SQL. Experience investigating security incidents, insider threats or data exfiltration. Knowledge of vulnerability management and security assurance within enterprise environments. #J ...

security controls. Key Responsibilities Design, implement and optimise Microsoft Sentinel environments, including onboarding, configuration and continuous improvement Develop and tune Sentinel analytics rules using KQL, improving detection coverage and reducing false positives Support security monitoring, threat detection and incident investigation across enterprise environments Configure and enhance Microsoft Defender XDR capabilities … produce security documentation, recommendations and implementation plans Required Experience Strong commercial experience within Microsoft security engineering roles Hands-on experience with Microsoft Sentinel, including KQL, detection engineering and SIEM optimisation Strong knowledge of Microsoft Defender XDR security capabilities Experience with Microsoft Purview DLP, sensitivity labels and information protection Strong understanding ...

development practices. Security Operations & Detection Engineering Lead day-to-day SOC operations. Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks. Conduct … operations. Essential Experience Experience leading or managing a SOC, Security Operations, Detection Engineering or Incident Response function. Strong hands-on Microsoft Sentinel experience. Advanced KQL skills and detection engineering expertise. Experience investigating and responding to security incidents within cloud environments. Strong knowledge of Azure security technologies, including: Entra ID Conditional ...

health, ingestion and cost management, retention, and integration with Defender XDR, Defender for Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting queries, map coverage to MITRE ATT&CK, track false‐positive rates, and retire rules that no longer earn their place. Automate … mentoring analysts. Hands‐on Microsoft Sentinel administration: workspace design, data connectors and ingestion cost control, retention, workbooks, automation rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule mapped to MITRE ATT&CK, and explain why it fires ...

confirm investigation workflows and expected outcomes. Analyse attacker tactics, techniques and procedures (TTPs) and ensure detection content remains aligned with emerging threats. Utilise KQL, SPL, SQL, log analysis, event correlation, and telemetry investigation to validate detection's and support investigations. Support continuous improvement of detection and response capabilities. Stakeholder Management … understanding of attacker tactics, techniques and procedures (TTPs). Experience mapping detections to recognised threat frameworks such as MITRE ATT&CK . Experience using KQL, SPL, SQL , or similar query languages for investigation, threat hunting, and alert validation. Ability to define escalation criteria and investigation workflows. Experience working across ...

deliver expert guidance and hands-on support, translating complex security concepts into clear recommendations for customers. Focus areas include Azure, Microsoft Defender, Sentinel, and KQL, with emphasis on relationship building and continuous security posture improvement across client journeys. #J-18808-Ljbffr ...

Security Operations Lead Salary: Up to £85,000 FTE Location: Home-based, with occasional travel to meetings as required Hours: 40 hours per week Reporting to: Director of Cyber Security and Resilience We are working ...

Senior Security Engineering Consultant – SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 – Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...

Senior Security Engineering Consultant - SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 - Hampshire (hybrid) We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. … occasional visits to the Hampshire office for specific team and business reasons will be expected. Key Skills Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred. SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar. Python, PowerShell, or similar scripting, plus ...

related security products for enterprise clients. You will partner with SOC analysts to advance threat protection and secure cloud adoption. The role requires strong KQL skills, SIEM experience, and Microsoft certifications (AZ-104, SC-200, AZ-500, AZ-305). It offers hybrid work with a monthly London office presence ...

website (web and mobile) and support Experience in Integration tools (Biztalk or similar) Proven hands-on experience in writing complex SQL Queries and Azure KQL Queries Proven hand-on experience in managing Digital solutions hosted using IIS services e.g. mobile Experience in supporting ETL/ELT solutions like Azure data ...

testing tools such as Selenium Experience in QA testing within D365, F&O, Azure Logic Apps, and ideally, Totalmobile Knowledge of programming languages, SQL, KQL and scripting Strong experience of performance and security testing, functional, usability, regression, UI and testing Writing support documentation Substantial experience of working to deadlines ...