Kusto Engineer

Designs and develops advanced technical cybersecurity data and analytics capabilities across both uniform and bespoke corporate information technology environments. Plans, builds, enhances and evangelizes cybersecurity data technologies by building, feeding and supporting data analytics capabilities in order to drive security response and major positive security impact. Drives maturity across the security algebras; elevates others to think in aggregates, graphs, and vectors over tables. Technical Requirements: • Primary skills: Kusto Query Language Azure Data Explorer Azure Monitor Log Analytics Microsoft Sentinel Microsoft Defender platforms Azure Data Explorer Azure Monitor Log Analytics Microsoft Sentinel Microsoft Defender platforms Responsibilities: Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time. • Designs and implements advanced cybersecurity data solutions that identify risks and guide both response and security assurance efforts. • Performs and enhances data acquisition and analysis to uncover and remediate significant vulnerabilities. • Integrates data from various information security technologies in various environments, defining and improving automatable scenarios, and processes. • Serves as a key technical point of escalation for challenging security data issues, diagnosing recurring problems and creating reusable solutions that improve how the organization consumes security data. • Assesses emerging security threats, tools, and architectural options, and provides recommendations that shape technical plans, priorities, and goals for the job area. • Collaborates with product, engineering and operations teams to apply modern security practices in all stages of the security development lifecycle. • Develops and maintains security baselines, guardrails, and control patterns for systems and applications in the area of responsibility, contributing to approaches that support regulatory and policy compliance. • Leads the technical execution of major incident response and forensic activities within the job area, coordinating tasks, leveraging tooling effectively, and suggesting improvements to playbooks and processes. • Provides guidance, coaching, and technical training to other security engineers, hosting reviews and sharing best practices that elevate team capability. • Lowers the bar to entry for data excellence across the organization by enablement, evangelization, education, and smart design. Preferred Skills: Technology->Cloud Security->Microsoft Azure - Threat Detection & Response->Azure Monitor