17 of 17 Remote/Hybrid Kusto Query Language Jobs

Assist with monthly SOC reporting and contribute insights into customer security posture Support client service reviews and communicate cyber risks in clear, business-friendly language Conduct security assessments, including vulnerability testing and risk analysis Ensure timely, high-quality incident resolution in line with SOC standards and SLAs … responding to cyber security incidents Hands-on experience with SIEM, EDR, and email security tooling Experience working in a Microsoft XDR SOC Strong KQL (Kusto Query Language) skills Experience mentoring and supporting analysts at different levels Excellent written and verbal communication skills Strong analytical thinking, judgement ...

gaps and improve system observability. Support incident investigation and continuous service improvement. Manage monitoring configuration using Infrastructure as Code (Bicep) and version control. Develop KQL queries, dashboards and visualisations. Define monitoring standards, SLIs and SLOs where appropriate. Produce documentation and share knowledge across the engineering team. Essential Skills & Experience Significant … Grafana administration, dashboards and alerting. Experience with Microsoft Azure, including Azure Monitor, Application Insights and Log Analytics. Strong Kusto Query Language (KQL) skills. Experience monitoring Azure Integration Services, including Function Apps, Logic Apps, Service Bus and API Management. Experience integrating monitoring platforms with ITSM tools such ...

gaps and improve system observability. Support incident investigation and continuous service improvement. Manage monitoring configuration using Infrastructure as Code (Bicep) and version control. Develop KQL queries, dashboards and visualisations. Define monitoring standards, SLIs and SLOs where appropriate. Produce documentation and share knowledge across the engineering team. Essential Skills & Experience Significant … Grafana administration, dashboards and alerting. Experience with Microsoft Azure, including Azure Monitor, Application Insights and Log Analytics. Strong Kusto Query Language (KQL) skills. Experience monitoring Azure Integration Services, including Function Apps, Logic Apps, Service Bus and API Management. Experience integrating monitoring platforms with ITSM tools such ...

Cloud Hands-on experience with: Open-source and commercial deception/honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception) Advanced KQL for detection engineering and threat hunting at scale Detection-as-code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft ...

documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong Scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge ...

Knowledge:* Working across hybrid cloud environments* CIS hardening & benchmark standards* Cloud and AI engineering capabilities* One or more of the following would be advantageous: KQL, Python, linux shell* Data regulations as they relate to IT systems* Data Visualisation skills* Secure enablement and governance of Microsoft Copilot and GenAI (Copilot ...

Senior Security Analyst Leeds | Hybrid Working | Microsoft Security | Defender XDR | Sentinel | KQL I'm working with an exciting new client looking to add several experienced Senior Security Analysts to a high-performing SOC team supporting a regulated enterprise environment. This is a genuinely hands-on SOC role where … holidays What you'll be doing Investigating and responding to complex cyber security incidents Threat hunting across Microsoft Defender XDR and Microsoft Sentinel Using KQL to investigate alerts and identify root cause Working closely with Infrastructure, Cloud and Security Engineering teams Running proactive security activities, including vulnerability scanning and security ...

clear communication are key. Job Requirements AZ 500 certified (non negotiable) 3+ years hands on in Azure security Strong with: Microsoft Sentinel & Defender KQL Entra ID security controls Comfortable working independently and owning your domain Strong communication skills in English (Dutch is a plus) Job Responsibilities Own and manage cloud ...

Microsoft Fabric-based solutions while collaborating closely with clients to ensure effective implementation and performance. The ideal candidate will have expertise in SQL, KQL, and Azure data services, alongside experience in modern data architectures. This position offers a remote-first work environment with occasional travel to London. #J-18808-Ljbffr ...

building and maintaining ETL or ELT pipelines Experience working directly with stakeholders Ability to gather requirements and translate them into technical solutions Experience with KQL, Synapse or Databricks would be beneficial What you'll get in return for your experience This Data Engineer role is offering a salary ...

MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic. Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such ...

MITRE ATT&CK framework and how to practically apply it to threat hunting methodologies and detection logic. ·Proficiency in complex query writing (e.g., KQL, SPL, SQL) to filter, analyse, and visualise large, disparate datasets. Hands-on experience with EDR, NDR, SIEM, SOAR security platforms and data analysis platforms such ...

Data Warehousing. Proficiency in SQL and Azure Data Factory. Familiarity with data flows, dimensional modelling, and Power BI. BA background highly advantageous. Knowledge of KQL and DAX is desirable. Desirable Attributes : Experience in a regulated industry or with investment/financial data. Exposure to data visualisation tools like Power ...

Clearance. What youll be doing: Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM. Write and optimise detection logic using KQL and SPL. Turn monitoring requirements and use cases into effective, actionable detections. Tune alerts to reduce false positives and improve SOC efficiency. Validate detections against telemetry … What youll bring: Experience in SOC engineering, detection engineering or SIEM engineering. Strong hands-on experience with Microsoft Sentinel and Splunk. Solid knowledge of KQL and SPL. Experience building, testing and maintaining detection rules. Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. ...

Engineering: Continually tune and improve analytics rules, alerts, and workbooks within Microsoft Sentinel and Microsoft Defender. Threat Hunting: Conduct proactive threat hunting initiatives using KQL and intelligence-led techniques. Vulnerability Management: Oversee vulnerability scanning, remediation tracking, and control assurance activities. 🔐 Privacy Operations (1/3) Smarter Data Discovery … investigations into potential data spills, policy violations, or insider risk alerts via Microsoft Purview. Tech Environment SIEM/SOAR: Microsoft Sentinel (Analytics rules, playbooks, KQL) XDR: Microsoft Defender (Endpoint, Office 365, Identity, Cloud Apps) Compliance: Microsoft Purview (eDiscovery, DLP, Insider Risk Management) Automation: Logic Apps/Security Automation workflows What ...

define end-to-end security strategies aligned with Zero Trust and secure-by-design principles Lead Microsoft Sentinel implementations including data connector configuration, KQL analytics rule development, Logic Apps playbook automation, and SIEM tuning to reduce false positives and improve MTTR Assess and optimise client Defender XDR and Sentinel configurations … investigation Top 5 Skills Deep hands-on expertise across Microsoft Defender XDR and Microsoft Sentinel - architecture, deployment, tuning, and optimisation across enterprise environments Strong KQL development skills for analytics rules, data parsers, and detection engineering, with experience implementing Logic Apps playbooks for automated response workflows Proven experience leading Splunk ...

frameworks Experience with cloud data platforms (ideally Microsoft Fabric) Familiarity with Power BI or similar BI tools Ability to optimise and troubleshoot query performance Strong … analytical and problem-solving skills Desirable Skills Knowledge of modern data architectures Experience with SQL, SSRS, SSIS and SSAS Experience using PySpark Familiarity with KQL Experience with data cataloguing tools Exposure to C# What you'll get in return Competitive Salary - £52,750 with a generous hybrid working policy. Pension ...