21 of 21 Remote/Hybrid Kusto Query Language Jobs in the UK excluding London

Cyber Security team on an initial 3-month contract . This is a fully remote opportunity for an analyst with strong Microsoft Sentinel and KQL expertise who can contribute immediately within a live Security Operations Centre (SOC) environment. The successful candidate will play a key role in developing, tuning … translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content Write, optimise ...

Microsoft Sentinel and Microsoft Defender XDR . Experience with FortiSIEM or involvement in SIEM platform migrations. Knowledge of Kusto Query Language (KQL). Experience with Microsoft Defender for Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

Advantageous: MS Certified Fabric Data Engineer Associate, Medallion, Delta Lakes, Azure Data Factory, DevOps, IaC, CI/CD, Kusto Query Language (KQL), MS Purview, Key Vault, GenAI, + Agile Delivery. Benefits: Salary to £40,000 (DOE) + Remote/Hybrid Working + Pension + 25 days holiday ...

enterprise environment. A strong record of designing, building, operating and evolving Microsoft Sentinel as a production security monitoring and response capability. Deep expertise in KQL and the engineering of analytics rules, hunting queries, workbooks and threat-informed detection content. Extensive experience designing telemetry architectures and onboarding security data, including connectors ...

best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously Desirable Skills Experience with Microsoft Defender technologies Knowledge of KQL and detection rule development Previous experience within highly regulated or large enterprise environments Relevant cyber security certifications (SC-200, GCIA, GCIH, CISSP, Security+, etc.) Contract ...

macOS, Linux, Windows) investigation experience; IDS, IPS, EDR, and basic malware analysis Basic understanding of at least one of the following: OSQuery, SQL, and KQL Knowledge of frameworks such as MITRE Attack and Cyber Kill Chain Ability to work some weekends and holidays Experience with Windows and Linux command ...

cleansing data with limited guidance. You can present analysis and visualisations in clear ways to communicate complex messages. You can write SQL or KQL queries and know how to extract data using SQL or KQL. You can work with others to identify areas for improvement and simplify processes ...

experience Working in an MSP, consultancy, SaaS business or development team. Supporting regulated customers or operating across multiple customer environments. Azure Monitor, Application Insights, KQL or OpenTelemetry. Multi-tenant architecture and tenant isolation. Deploying or operating AI and LLM-based services. Relevant Microsoft certifications, such ...

triage, threat hunting, data loss prevention, and operational risk analysis. * Demonstrable experience with at least one major SIEM and EDR platform, additional hands on KQL/SPL, PowerShell/Python experience preferred. * Demonstrable experience with Security Orchestration and Automation. * Certifications such as SC-200, AZ-500, GCIA/GCIH/ ...

VirusTotal, ANY.RUN, Shodan, Qevlar, Vectra AI, Tracebit or Thinkst Canary as part of investigations, threat hunting or security validation. Ability to query in KQL, CQL, S1QL, XQL or similar languages, and to improve detections, dashboards, runbooks or detection logic. Hands‐on technical certifications, particularly those assessed through practical labs ...

lead security operations, detections, and the three-analyst team, troubleshooting issues and guiding engineering teams. Essential experience includes security engineering/operations, Microsoft Sentinel, KQL, incident response on cloud platforms, and IaC with Terraform/Bicep. #J-18808-Ljbffr ...

external attack surface management, penetration testing, security testing, threat intelligence or Red or Purple Teaming Experience with tools such as ServiceNow, Jira, Power BI, KQL, PowerShell or Python, or relevant cyber security training or certifications Belonging at The AA At The AA, we value the unique perspectives, experiences and ideas ...

health, ingestion and cost management, retention, and integration with Defender XDR, Defender for Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting queries, map coverage to MITRE ATT&CK, track false‐positive rates, and retire rules that no longer earn their place. Automate … mentoring analysts. Hands‐on Microsoft Sentinel administration: workspace design, data connectors and ingestion cost control, retention, workbooks, automation rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule mapped to MITRE ATT&CK, and explain why it fires ...

Entra ID security controls (Conditional Access, Identity Governance, Entra GSA, PIM) - Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy - Logic Apps, KQL and Microsoft Graph. You will join a small and very successful Microsoft Solutions Partner delivering services across Microsoft Cloud, Business Apps, Managed Services, Security and AI. … Security monitoring, detection engineering and incident response PowerShell scripting and security automation Azure services: Log Analytics, Azure Monitor, Azure Lighthouse, Azure Policy Logic Apps, KQL and Microsoft Graph Cloud security, identity and compliance frameworks (Cyber Essentials, CIS, Zero Trust) Microsoft Intune and baseline security configuration Certifications SC-200 Security Operations ...

Principal Security Engineer page is loaded## Principal Security Engineerlocations: Bexhill: Leicestertime type: Full timeposted on: Posted Todayjob requisition id: 60013362We’re a digital insurance provider with ambitious plans to become The Best and Biggest in ...

ESSENTIAL SKILLS Strong hands-on Azure infrastructure experience. Experience writing Terraform configurations and reusable modules. Practical Application Insights experience and the ability to write KQL queries for troubleshooting. Experience implementing observability, monitoring and alerting. Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. CI/… scripting experience. Ability to attend the Newcastle office once per month. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes, NSD #J-18808-Ljbffr ...

Running security assessments and delivering the remediation Migrating customers from third-party security tools onto the Microsoft stack Automating with Logic Apps, PowerShell and KQL Supporting the SOC with incident investigation and escalations Writing high-level and low-level design documentation What youll need Solid, proven implementation experience of Microsoft … endpoint engineering Practical Sentinel deployment and tuning (data connectors, analytics rules, workbooks) and Defender XDR rollout Strong Entra ID implementation experience (Conditional Access, PIM) KQL and PowerShell skills Confidence working directly with customers Helpful, but not essential Logic Apps, Microsoft Graph, Azure Lighthouse and Azure Policy Exposure to Cyber Essentials ...

Infrastructure as Code (Bicep), ensuring repeatable, secure, and scalable environments.* **Implement and maintain observability**, set up dashboards, alerts, and logging (App Insights, Log Analytics, KQL) so we always know how our integrations are performing.* **Enable secure, private connectivity** for business data using Azure networking features (Private Link, Private DNS, Managed …/test/prod) using CI/CD pipelines.* Familiarity with monitoring and troubleshooting integrations using Azure’s observability tools (App Insights, Log Analytics, KQL).* Understanding of secure networking in Azure (Private Endpoints, Private DNS, VNETs).* A focus on business outcomes and always looking for ways to automate ...

ESSENTIAL SKILLS * Strong hands-on Azure infrastructure experience. * Experience writing Terraform configurations and reusable modules. * Practical Application Insights experience and the ability to write KQL queries for troubleshooting. * Experience implementing observability, monitoring and alerting. * Infrastructure configuration and security hardening experience, with an understanding of the controls implemented. * CI/… required skills) your application to our client in conjunction with this vacancy only. KEY SKILLS DevOps Engineer, Azure, Terraform, Infrastructure as Code, Application Insights, KQL, Observability, CI/CD, PowerShell, Ansible, Kubernetes ...

Monitoring security events across cloud, endpoint, identity and network environments Threat hunting and proactive security investigations Querying and analysing data using KQL within Microsoft Sentinel Working with Microsoft Defender XDR technologies Supporting vulnerability management and security posture improvements Detection engineering, alert tuning and security tooling optimisation Producing technical reports … working as a: Senior SOC Analyst SOC Analyst Cyber Security Analyst Security Analyst Security Operations Analyst Blue Team Analyst Experience with Microsoft Sentinel, KQL and the wider Microsoft security ecosystem would be highly advantageous. Package 4 on/4 off 12-hour shifts Home-based night shifts Private medical cover ...