21 of 21 Kusto Query Language Jobs in the UK excluding London

translate security risks, technical findings and recommended actions for technical and non-technical audiences. Experience using PowerShell or Kusto Query Language (KQL) to support analysis, monitoring, and automation. Exposure to coding (e.g. Python) combined with a demonstrable ability to work with accuracy and attention to detail. Cyber ...

translate security risks, technical findings and recommended actions for technical and non-technical audiences. Experience using PowerShell or Kusto Query Language (KQL) to support analysis, monitoring, and automation. Exposure to coding (e.g. Python) combined with a demonstrable ability to work with accuracy and attention to detail Cyber ...

Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerized environments, and SaaS-based security solutions. Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations, and advanced analytics development. Security Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft ...

documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge ...

attack vectors. Excellent technical documentation and communication skills. Desirable Skills AWS and Azure cloud security. Containerised environments and SaaS security solutions. Python, PowerShell, SPL, KQL, and SQL. EDR, UBA, CASB, CSPM, vulnerability assessment, and threat intelligence platforms. CI/CD tools such as GitLab and Jenkins. Infrastructure as Code using ...

MITRE ATT&CK, develop response playbooks, and implement Detection-as-Code best practices. Key Requirements Experience with SIEM platforms (Microsoft Sentinel preferred) Strong KQL and detection engineering skills SOAR automation and playbook development experience Python and/or PowerShell scripting XDR/EDR experience Knowledge of MITRE ...

operations (coverage management, escalation handling, policy tuning). Familiarity with Microsoft Defender suite and/or Microsoft Sentinel. Scripting/automation skills (PowerShell, KQL, Python). Knowledge of ransomware recovery patterns (immutable backups, restore validation, offline documentation). Exposure to audit/compliance requirements (ISO 27001, NIST, CIS) and evidence ...

Microsoft Sentinel. Proven ability to design and implement Conditional Access, identity protection, and device compliance policies. Experience developing detection rules, analytics, and automation using KQL and Sentinel playbooks. Solid understanding of Zero Trust architecture and practical implementation across enterprise environments. Strong knowledge of endpoint hardening, EDR tuning, and modern attack ...

Senior Security Analyst Leeds | Hybrid Working | Microsoft Security | Defender XDR | Sentinel | KQL I'm working with an exciting new client looking to add several experienced Senior Security Analysts to a high-performing SOC team supporting a regulated enterprise environment. This is a genuinely hands-on SOC role where … holidays What you'll be doing Investigating and responding to complex cyber security incidents Threat hunting across Microsoft Defender XDR and Microsoft Sentinel Using KQL to investigate alerts and identify root cause Working closely with Infrastructure, Cloud and Security Engineering teams Running proactive security activities, including vulnerability scanning and security ...

runbooks. Were looking for 3+ years in a SOC or MSSP, hands-on with SIEM, EDR, and Microsoft 365/Entra ID security. KQL or PowerShell scripting, phishing and malware triage experience, and clear written communication are essential. Security+, SC-200, BTL1 or similar certs beneficial. ...

reduce noise. Good understanding of data pipeline engineering, log enrichment, data quality and large-scale ingestion architectures. Strong knowledge of SPL; experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

Analytics, Defender for Cloud) Excellent understanding of cloud performance, IaaS/PaaS, networking fundamentals, API performance and capacity modelling Skilled in dashboards, log queries (KQL), custom metrics and performance analysis Ability to diagnose complex issues across infrastructure, networks, applications or databases Confident scripting and automation skills (PowerShell, Azure Automation, Graph ...

just looking at baseline CVSS scores Incident response experience, including investigation, remediation, and root cause analysis Working knowledge of Microsoft Sentinel, Defender, and KQL A background in sys admin or engineering that gives you intuition for how systems actually fail A mindset that security exists to enable the business Comfortable ...

models and platform fundamentals (Azure, Snowflake, Kubecost desirable). Experience with FinOps practices and cost management tools, particularly Kubecost and cloud-native cost portals (KQL desirable). Demonstrated ability to work cross-functionally with Finance and technical teams to support cost visibility and decision-making. ...

maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute to documentation of processes, tools, and detection logic What You’ll Bring Must … Have Skills & Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks ...

Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost … contributing to team development Acting as technical SME during incidents What we're looking for: Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity ...

bench of analysts who can operate at the same standard. Key Responsibilities Set the detection engineering standard - author, tune, and peer-review detections in KQL, SPL, EQL, or Sigma; manage the false-positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune … Security Manager (CISM) CompTIA Advanced Security Practitioner (CASP+) Experience leading detection engineering in a SOC or similar environment - including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application-level telemetry from ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Incident Response Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package £48,654.60 base salary £9,965.40 shift allowance 4 on/4 off 12-hour ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Incident Response Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package £48,654.60 base salary £9,965.40 shift allowance 4 on/4 off 12-hour ...

updates, product changes, new customer deployments and connectivity investigations Investigate API and platform-related issues using tools such as Postman, Azure logs and basic KQL queries Recreate technical issues, validate payloads and identify whether problems relate to configuration, customer usage, devices, data or genuine platform defects Provide clear, evidence-based … status codes, API keys, authentication and permissions Experience using Postman or similar API testing tools Exposure to Azure monitoring tools, application logs or basic KQL queries Strong written and verbal communication skills A calm, organised and customer-focused approach Excellent attention to detail and technical documentation skills Experience with ...