Kusto Engineer

Kusto Engineer

5-8 years of experience in cybersecurity, security engineering, security analytics, data engineering, or related technical roles. Strong hands-on experience with Kusto Query Language (KQL) and Azure Data Explorer (ADX). Experience designing and developing cybersecurity analytics, detections, dashboards, and investigative queries. Strong understanding of cybersecurity principles, concepts, and best practices. Experience with threat detection, vulnerability management, security monitoring, incident response, and threat hunting. Experience working with large-scale data ingestion, transformation, and analysis pipelines. Experience integrating data from SIEM, EDR, IAM, cloud, network, and application security platforms. Working knowledge of software development lifecycle (SDLC) and secure development practices. Proficiency in one or more scripting/programming languages such as Python, PowerShell, C#, or similar. Strong analytical, troubleshooting, and problem-solving skills with the ability to work independently on complex technical challenges. Experience implementing and managing information security technologies. Advanced cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC). Experience with security tooling and cloud-scale data systems such as Azure Data Explorer and accompanying cloud services. Role will involve supporting non-customer facing .NET based services. Familiarity with emerging cybersecurity technologies, industry trends, and strategic risk management. Design, develop, and implement advanced cybersecurity data and analytics solutions that identify risks and support security response and assurance efforts. Develop and maintain cybersecurity analytics using Kusto Query Language (KQL), Azure Data Explorer (ADX), and related cloud technologies. Build, optimize, and support data ingestion pipelines for collecting, processing, and analyzing security telemetry from diverse security platforms and enterprise environments. Perform advanced data acquisition, correlation, and analysis to identify and remediate vulnerabilities, threats, and security risks. Integrate data from multiple security technologies and systems to improve visibility, automation, threat detection, and operational effectiveness. Develop and enhance security detections, dashboards, reports, and investigative analytics to support security operations and threat-hunting activities. Troubleshoot and resolve complex data quality, ingestion, performance, and security analytics challenges. Serve as a technical escalation point for security data and analytics-related issues and develop reusable solutions for recurring problems. Collaborate with product, engineering, and operations teams to apply security best practices throughout the software development lifecycle. Develop and maintain security baselines, guardrails, and control patterns that support organizational security and compliance requirements. Support and contribute to major incident response, forensic investigations, and remediation efforts through effective use of security data and analytics. Evaluate emerging security threats, technologies, and analytics capabilities, providing recommendations for continuous improvement. Document technical solutions, standards, processes, and operational procedures to promote consistency and knowledge sharing. Provide technical guidance and mentorship to team members and share best practices in KQL development, cybersecurity analytics, and data engineering. Promote data-driven security practices and contribute to the maturity of cybersecurity analytics capabilities across the organization.