Kusto Engineer

Position Overview:

• We are in search of a skilled Cybersecurity Data Analytics Engineer, possessing extensive knowledge in Kusto Query Language (KQL), Azure Data Explorer (ADX), and cybersecurity analytics.
• This position entails the design, development, and enhancement of cybersecurity data and analytics capabilities within enterprise technology frameworks.
• The successful candidate will create and maintain scalable security data solutions, converting security telemetry into actionable insights while playing a vital role in threat detection, incident response, vulnerability management, and overall enhancement of security posture.
• This role requires close collaboration with security engineering and operations teams to drive data-informed cybersecurity results.

Core Responsibilities:

• Architect, develop, and deploy sophisticated cybersecurity data and analytics solutions that identify risks and bolster security response and assurance initiatives.
• Develop and sustain cybersecurity analytics utilizing Kusto Query Language (KQL), Azure Data Explorer (ADX), and associated cloud technologies.
• Construct, optimize, and manage data ingestion pipelines for the collection, processing, and analysis of security telemetry from various security platforms and enterprise systems.
• Conduct advanced data acquisition, correlation, and analysis to detect and address vulnerabilities, threats, and security risks.
• Integrate data from a range of security technologies and systems to enhance visibility, automation, threat detection, and operational efficiency.
• Create and improve security detection dashboards, reports, and investigative analytics to facilitate security operations and threat hunting efforts.
• Diagnose and resolve intricate data quality, ingestion, performance, and security analytics issues.
• Act as a technical escalation point for security data and analytics-related challenges, developing reusable solutions for recurring issues.
• Partner with product engineering and operations teams to implement security best practices throughout the software development lifecycle.
• Establish and maintain security baselines, guardrails, and control patterns that align with organizational security and compliance standards.
• Assist and participate in major incident response and forensic investigations, leveraging security data and analytics effectively.
• Assess emerging security threats, technologies, and analytics capabilities, offering recommendations for ongoing enhancement.
• Document technical solutions, standards, processes, and operational procedures to foster consistency and knowledge sharing.
• Provide technical mentorship and guidance to team members, sharing best practices in KQL development, cybersecurity analytics, and data engineering.
• Encourage data-driven security practices and contribute to the evolution of cybersecurity analytics capabilities organization-wide.

Technical Qualifications:

• 5 to 8 years of experience in cybersecurity, security engineering, security analytics, data engineering, or related technical fields.
• Proven hands-on experience with Kusto Query Language (KQL) and Azure Data Explorer (ADX).
• Experience in designing and developing cybersecurity analytics detections, dashboards, and investigative queries.
• Strong grasp of cybersecurity principles, concepts, and industry best practices.
• Experience with threat detection, vulnerability management, security monitoring, incident response, and threat hunting.
• Experience with large-scale data ingestion, transformation, and analysis pipelines.
• Experience integrating data from SIEM, EDR, IAM, cloud, network, and application security platforms.
• Familiarity with the software development lifecycle (SDLC) and secure development methodologies.
• Proficiency in one or more scripting or programming languages, such as Python, PowerShell, C#, or similar.
• Strong analytical, troubleshooting, and problem-solving abilities, with the capacity to work independently on complex technical issues.
• Experience in implementing and managing information security technologies.

Additional Qualifications:

• Possession of advanced cybersecurity certifications (e.g., CISSP, CISM, CEH, GIAC).
• Experience with security tools and cloud-scale data systems, including Azure Data Explorer and related cloud services.
• This role will involve supporting non-customer-facing .NET-based services.
• Familiarity with emerging cybersecurity technologies, industry trends, and strategic risk management practices.

Preferred Skills:

Technology->Cloud Platform->Azure App Development->Azure Monitor, Technology->Cloud Platform->Azure Analytics Services->Azure Data Explorer