76 to 100 of 108 Kusto Query Language Jobs in the UK

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

connectors Setting up Azure Monitor Agent (AMA) and Data Collection Rules (DCRs) Building and fixing security log-routing and ingestion pipelines Writing and adapting KQL queries to validate ingestion and diagnose problems Making parsing and normalisation changes where needed Testing data completeness, quality and ingestion latency Finding and fixing failed … experience Practical experience configuring and troubleshooting Sentinel data connectors In-depth knowledge of Azure Monitor Agent and Data Collection Rules Good working knowledge of KQL Experience with security log pipelines, ingestion, parsing and normalisation Experience testing and validating security telemetry Strong integration and troubleshooting skills A solid understanding of Azure ...

remediation of misconfigurations and vulnerabilities against CIS, NIST, and PCI DSS benchmarks. Security Monitoring Fine tune, and maintain modern SIEM platform (e.g. Sentinel) including KQL detection rules, workbooks, logging pipelines, and AI-assisted alert triage. Map detection coverage against MITRE ATT&CK tactics and techniques. Identify and close visibility gaps … security or other cloud native tooling. Experience with security tools: Microsoft Sentinel, SentinelOne, Netskope, Flashpoint, Wiz or similar tooling. Strong Microsoft Sentinel expertise: KQL, detection rules, workbooks, and logging pipelines. Working knowledge of DLP and threat intelligence monitoring. Experience applying AI/ML to security workflows – automated triage, behavioural analytics ...

escalation from the managed SOC, leading investigation, containment and root-cause analysis for Defender XDR and Sentinel incidents Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning … managed SOC or MSSP Clear, concise written communication, from incident reports to management-ready metrics It would be a bonus if you also have: KQL and MITRE ATT&CK knowledge Microsoft SC-200, SC-100 or AZ-500 certification Experience in financial services or another regulated environment, and familiarity with ...

experience with log analysis and telemetry interpretation, including familiarity with querying or analyzing data using tools such as SIEM platforms or query languages (KQL, SPL, SQL, or similar) Exposure to security platforms and technologies such as SIEM, EDR/XDR, identity systems, or cloud environments Foundational understanding of common ...

findings to an insurer, a regulator or a court. Feed findings to the Incident Manager, legal counsel and communications as the picture develops, in language each of them can use. Skills and Experience Minimum 5 years cyber security experience is required for this role, with at least … Velociraptor, KAPE, X-Ways, Magnet Axiom, EnCase, FTK, Volatility or the Zimmerman tools, plus a SIEM such as Splunk or Microsoft Sentinel and query languages including KQL. Cloud and identity forensics across Microsoft 365, Entra ID and at least one of AWS, Azure or Google Cloud. Ransomware casework, including ...

Operations Centre) and consists of monitoring real‐time events and incidents from our customers, as well threat hunting from reports, dashboards and searches using query languages and scripts. What you’ll be doing Responsible for working in a 24x7 Cyber Security Operation Centre (SOC) environment. Responding to security events … firewalls, DHCP, DNS, LAN/WAN, cloud, containers, servers, endpoints and operating systems. Experience with scripting and query languages such as SQL, SPL, KQL, Python, bash and powershell. Our Package Competitive salary and on-target bonus plan Flexible and smart working Training and development opportunities Competitive share options ...

Operations Centre) and consists of monitoring real‐time events and incidents from our customers, as well threat hunting from reports, dashboards and searches using query languages and scripts. What you’ll be doing Responsible for working in a 24x7 Cyber Security Operation Centre (SOC) environment. Responding to security events … firewalls, DHCP, DNS, LAN/WAN, cloud, containers, servers, endpoints and operating systems. Experience with scripting and query languages such as SQL, SPL, KQL, Python, bash and powershell. Our Package Competitive salary and on-target bonus plan Flexible and smart working Training and development opportunities Competitive share options ...

Operations Centre) and consists of monitoring real‐time events and incidents from our customers, as well threat hunting from reports, dashboards and searches using query languages and scripts. What you’ll be doing Responsible for working in a 24x7 Cyber Security Operation Centre (SOC) environment. Responding to security events … firewalls, DHCP, DNS, LAN/WAN, cloud, containers, servers, endpoints and operating systems. Experience with scripting and query languages such as SQL, SPL, KQL, Python, bash and powershell. Our Package Competitive salary and on-target bonus plan Flexible and smart working Training and development opportunities Competitive share options ...

positives. Considerable proficiency in log analysis, telemetry interpretation, and cross-system data correlation, including the ability to query, manipulate, and optimize data using KQL, SPL, SQL, or similar languages for investigative and detection use casesPractical experience with containment, response actions, and automation, including developing or maintaining SOAR workflows ...

Responsibilities Lead delivery of tenant rationalisation and security remediation activities. Design, build and optimise Microsoft Sentinel detections and analytics rules. Develop and tune KQL queries to improve threat detection coverage. Translate SOC assessment findings into a prioritised delivery backlog. Coordinate implementation activities across technical teams. Validate security improvements and ensure … agreed acceptance criteria are met. Support testing, stakeholder engagement and delivery governance. Essential Skills & Experience Strong commercial experience with Microsoft Sentinel . Advanced KQL development and detection engineering expertise. Experience designing, building and tuning analytics rules and use cases. Security Operations Centre (SOC) delivery experience. Azure security and remediation experience. ...

failover exercises covering invocation, validation and return to primary, maintaining runbooks, responsibilities and test evidence Improve service‐health monitoring using Azure Monitor, Log Analytics, KQL and Application Insights. Map services to monitoring signals, tune alerts for actionability, routing and ownership, and distinguish customer‐facing status from operational diagnostics Troubleshoot production … assessing and validating disaster recovery, including dependency mapping, RTOs/RPOs, recovery procedures, restore testing and regional failover Experience with Azure Monitor, Log Analytics, KQL and Application Insights, including service‐health monitoring, alert tuning and troubleshooting distributed, API‐driven services Practical Terraform experience covering modules, state management and drift detection ...

Turner & Townsend is a global professional services company with over 22,000 people in more than 60 countries. Working with our clients across real estate, infrastructure, energy and natural resources, we transform together delivering outcomes ...

data, and computing derived engineering values in near real time. Model and query large time‐series and document datasets in Azure Data Explorer (KQL) and Azure Cosmos DB, with a clear eye on partitioning, query cost and retention. Build and maintain the front end , a React 18/… scale Azure Cosmos DB Data modelling, partition‐key design and consistency trade‐offs Azure Data Explorer (ADX) Time‐series ingestion and analysis, with working KQL Azure Event Hubs High‐throughput event streaming, consumer groups, replay and checkpointing Azure Stream Analytics (ASA) Streaming queries, windowing, and user‐defined functions Azure ...

suspicious behaviour is legitimate. You'll regularly work with: Microsoft Entra ID Identity Protection Conditional Access Sign-in and audit logs Advanced Hunting/KQL Vulnerability management A significant part of the role will be identifying, investigating and driving remediation of vulnerabilities across Iceland's technology estate. … make use of technologies including: Microsoft Defender XDR/Defender for Endpoint Microsoft Entra ID and Identity Protection Microsoft Sentinel Microsoft Defender for Cloud KQL and Advanced Hunting Conditional Access ANY.RUN Azure and Microsoft 365 security tooling What we're looking for We're looking for someone with a solid ...

Principal Security Engineer page is loaded## Principal Security Engineerlocations: Bexhill: Leicestertime type: Full timeposted on: Posted Todayjob requisition id: 60013362We’re a digital insurance provider with ambitious plans to become The Best and Biggest in ...

Python Developer 1-2 days a week on-site in London £450-£650 outside IR35 Requires Active SC Clearance The Role We are seeking an experienced Python Developer to join a growing engineering team delivering ...

procedures and escalation requirements. Qualifications Demonstrated hands‐on SIEM expertise developing complex queries, correlation searches, dashboards, and content from scratch, using YARA-L, SPL, KQL, SQL, or equivalent query and detection languages. Experience in insider risk, cybersecurity investigations, security analytics, or a related technical security discipline. Experience in mitigating ...

APIs, files, SaaS applications, SAP, streaming sources) using pipelines, shortcuts and mirroringWrite clean, reusable and tested code in PySpark, Spark SQL, T-SQL and KQL, optimizing Delta tablesAdd data quality checks, validation rules, logging and alerting to data pipelinesBuild enterprise semantic models (star schema) using Direct Lake, Import or DirectQuery … Solid understanding of data warehousing and lakehouse concepts, Delta/Parquet formats and dimensional modeling (Kimball)Experience with Real-Time Intelligence (Eventstreams, Eventhouse/KQL, Activator)Ability to turn architecture documents and requirements into working, well-documented solutionsAnalytical mindset, structured way of working and strong focus on qualityEnglish (B2+ ...

ESSENTIAL SKILLS Strong hands-on Azure infrastructure experience. Experience writing Terraform configurations and reusable modules. Practical Application Insights experience and the ability to write KQL queries for troubleshooting. Experience implementing observability, monitoring and alerting. Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. CI/… scripting experience. Ability to attend the Newcastle office once per month. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes, NSD #J-18808-Ljbffr ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

guidance, helping customers optimize their security defenses and mitigate risks effectively. Microsoft Focus: Utilize your knowledge of Microsoft security products, including Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite, to offer tailored recommendations and solutions. Relationship Building: Build and nurture strong relationships with customers, acting as a reliable … business and providing informal leadership in cyber security matters. Strong understanding of Microsoft security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling you to offer valuable insights and recommendations ...

Infrastructure as Code (Bicep), ensuring repeatable, secure, and scalable environments.* **Implement and maintain observability**, set up dashboards, alerts, and logging (App Insights, Log Analytics, KQL) so we always know how our integrations are performing.* **Enable secure, private connectivity** for business data using Azure networking features (Private Link, Private DNS, Managed …/test/prod) using CI/CD pipelines.* Familiarity with monitoring and troubleshooting integrations using Azure’s observability tools (App Insights, Log Analytics, KQL).* Understanding of secure networking in Azure (Private Endpoints, Private DNS, VNETs).* A focus on business outcomes and always looking for ways to automate ...

unapproved integrations, third‐party model risk, and inadequate monitoring; translate findings into proportionate safeguards. Build automation and proof‐of‐concept solutions using PowerShell, Python, KQL, APIs, policy‐as‐code, infrastructure‐as‐code, cloud‐native functions, and workflow technologies, and mature successful concepts into governed, supportable services. Monitoring, Governance, Reporting & Leadership … agent actions, excessive permissions, third‐party model risk, and insufficient monitoring or governance. Ability to automate security processes and control validation using PowerShell, Python, KQL, APIs, policy‐as‐code, infrastructure‐as‐code, cloud‐native functions, or comparable technologies. Experience reviewing cloud solution designs and integrations for authentication, authorization, network controls ...

using tools such as Github, Jira, Zendesk, and xMatters for engineering workflow and operational collaboration. Experience with a querying language such as SPL, KQL, SQL, etc. In a Security Environment. Strong communication and influencing skills within technical teams. Awareness of product methodologies and agile delivery approaches. Exposure to technical ...