Job Type Full-time Description EOA Technologies is seeking a System Engineer on one of our ... KQL) and YARA rules. * Additionally, the individual will act as a primary technical advisor to ...
Job Type Full-time Description EOA Technologies is seeking a System Engineer on one of our ... KQL) and YARA rules. * Additionally, the individual will act as a primary technical advisor to ...
Cyber Analyst
Nashville, TN · On-site
$110K - $132K/yr
Job Type Full-time Description Position Summary: FRDA is seeking a Cyber Intelligence Analyst to ... Experience with log analysis and query languages such as SPL and KQL. * Familiarity with the MITRE ...
Cyber Analyst
Nashville, TN · On-site
$110K - $132K/yr
Job Type Full-time Description Position Summary: FRDA is seeking a Cyber Intelligence Analyst to ... Experience with log analysis and query languages such as SPL and KQL. * Familiarity with the MITRE ...
Senior Security Engineer
Orlando, FL · On-site
$106K - $146K/yr
Orlando, FL or Tampa, FL (Onsite, Full-Time) Work Arrangement : This is an in-office position, open ... Defender XDR enterprise defense suite and Microsoft Sentinel with proficient KQL; M365 tenant ...
Senior Security Engineer
Orlando, FL · On-site
$106K - $146K/yr
Orlando, FL or Tampa, FL (Onsite, Full-Time) Work Arrangement : This is an in-office position, open ... Defender XDR enterprise defense suite and Microsoft Sentinel with proficient KQL; M365 tenant ...
Cybersecurity Lead
Houston, TX · On-site
... Type Full-time Experience 10+ Years Work Model Hybrid / Remote Domain Consulting / MSSP ... KQL, analyticsrules, SOAR playbooks) and Defender XDR suite Lead threat detection, incident ...
Cybersecurity Lead
Houston, TX · On-site
... Type Full-time Experience 10+ Years Work Model Hybrid / Remote Domain Consulting / MSSP ... KQL, analyticsrules, SOAR playbooks) and Defender XDR suite Lead threat detection, incident ...
Endpoint Security Architect (Annapolis Junction, MD)
Annapolis, MD · On-site
$240K - $250K/yr
... Query Language (KQL) and YARA rules. * Act as a primary technical advisor to Government ... This is a full time position
Endpoint Security Architect (Annapolis Junction, MD)
Annapolis, MD · On-site
$240K - $250K/yr
... Query Language (KQL) and YARA rules. * Act as a primary technical advisor to Government ... This is a full time position
Senior Systems Engineer - Endpoint Security
Fort George G Meade, MD · On-site
$115K - $158K/yr
Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with ... IOCs) using KQL and YARA. * Serve as a primary technical advisor to Government stakeholders ...
Senior Systems Engineer - Endpoint Security
Fort George G Meade, MD · On-site
$115K - $158K/yr
Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with ... IOCs) using KQL and YARA. * Serve as a primary technical advisor to Government stakeholders ...
Senior IT Security Engineer - Full Time, Days (Remote) 11492
Bellflower, CA · On-site +1
$145K/yr
Strong KQL proficiency for custom analytics, threat hunting, and workbook development * Hands-on experience with Entra ID / Azure AD, hybrid AD environments, and M365 security administration
Senior IT Security Engineer - Full Time, Days (Remote) 11492
Bellflower, CA · On-site +1
$145K/yr
Strong KQL proficiency for custom analytics, threat hunting, and workbook development * Hands-on experience with Entra ID / Azure AD, hybrid AD environments, and M365 security administration
Microsoft Sentinel (KQL, analytics rules, workbooks) * Splunk (SPL, dashboards, correlation ... Full Time Posting Start Date: 07/08/2026 Posting End Date: 07/31/2026 This contractor and ...
Microsoft Sentinel (KQL, analytics rules, workbooks) * Splunk (SPL, dashboards, correlation ... Full Time Posting Start Date: 07/08/2026 Posting End Date: 07/31/2026 This contractor and ...
Security Analyst - Identity and Access Management
$102K - $112K/yr
... Query Language (KQL) to enhance threat detection, automate response, and strengthen the ... Employment Type: FULL_TIME
Security Analyst - Identity and Access Management
$102K - $112K/yr
... Query Language (KQL) to enhance threat detection, automate response, and strengthen the ... Employment Type: FULL_TIME
Full Stack Developer
Dallas, TX · On-site
Dallas, TX Hybrid position Fulltime position Description: Experience: 7 years+ . As a Senior ... KQL, GraphQL - Exceptional problem-solving, communication, and team collaboration abilities.
Full Stack Developer
Dallas, TX · On-site
Dallas, TX Hybrid position Fulltime position Description: Experience: 7 years+ . As a Senior ... KQL, GraphQL - Exceptional problem-solving, communication, and team collaboration abilities.
IT Security Engineer - Purview and Sentinel Lead - Full Time, Days (Remote) 11491
Bellflower, CA · Remote
$135K/yr
Advanced KQL proficiency - analytic rules, hunting queries, workbooks, and summarization * Hands-on experience with Sentinel data connectors, DCRs, automation rules, and Logic Apps playbooks
IT Security Engineer - Purview and Sentinel Lead - Full Time, Days (Remote) 11491
Bellflower, CA · Remote
$135K/yr
Advanced KQL proficiency - analytic rules, hunting queries, workbooks, and summarization * Hands-on experience with Sentinel data connectors, DCRs, automation rules, and Logic Apps playbooks
Systems Engineer (Full Time) Remote in USA
$63K - $80K/yr
Full-Time, Remote in United States Position Overview We are looking for a Systems Engineer to join ... Microsoft Defender for Endpoint - onboarding, alert triage, basic KQL * Windows Server ...
Systems Engineer (Full Time) Remote in USA
$63K - $80K/yr
Full-Time, Remote in United States Position Overview We are looking for a Systems Engineer to join ... Microsoft Defender for Endpoint - onboarding, alert triage, basic KQL * Windows Server ...
Systems Engineer
$145K - $165K/yr
KQL/SQL Queries * DevOps * Certs: Microsoft AZ900 and MS900 What you can expect from us * The ... Employment Type: FULL_TIME
Systems Engineer
$145K - $165K/yr
KQL/SQL Queries * DevOps * Certs: Microsoft AZ900 and MS900 What you can expect from us * The ... Employment Type: FULL_TIME
Detection Engineer Analyst Subject Matter Expert (SME)
Quantico, VA · On-site
$130K - $150K/yr
Experience writing signatures (e.g., KQL/Snort/ePO/Yara) for network and host IDS/IPS. Desired ... We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also ...
Quick apply
Detection Engineer Analyst Subject Matter Expert (SME)
Quantico, VA · On-site
$130K - $150K/yr
Experience writing signatures (e.g., KQL/Snort/ePO/Yara) for network and host IDS/IPS. Desired ... We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also ...
Detection Engineer Analyst Subject Matter Expert (SME)
Quantico, VA · On-site
$130K - $150K/yr
Experience writing signatures (e.g., KQL/Snort/ePO/Yara) for network and host IDS/IPS. Desired ... We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also ...
Detection Engineer Analyst Subject Matter Expert (SME)
Quantico, VA · On-site
$130K - $150K/yr
Experience writing signatures (e.g., KQL/Snort/ePO/Yara) for network and host IDS/IPS. Desired ... We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also ...
This is a permanent, full-time position based in the United States and requires U.S. citizenship ... KQL, and related technologies. * Follow established security, change management, incident ...
This is a permanent, full-time position based in the United States and requires U.S. citizenship ... KQL, and related technologies. * Follow established security, change management, incident ...
... KQL, and PowerShell. * Hands-on experience administering enterprise network infrastructure and ... Location: position is full time on-site in our Mclean, VA office. Preferred Qualifications:
New
... KQL, and PowerShell. * Hands-on experience administering enterprise network infrastructure and ... Location: position is full time on-site in our Mclean, VA office. Preferred Qualifications:
New
Security Operations Engineer I
Redondo Beach, CA · On-site
$125K - $155K/yr
Information Technology Employment Type: Full Time Location: Redondo Beach Compensation: $125,000 ... Basic scripting or automation experience (PowerShell, Python, KQL) * Experience supporting ...
Security Operations Engineer I
Redondo Beach, CA · On-site
$125K - $155K/yr
Information Technology Employment Type: Full Time Location: Redondo Beach Compensation: $125,000 ... Basic scripting or automation experience (PowerShell, Python, KQL) * Experience supporting ...
This is a permanent, full-time position based in the United States and requires U.S. citizenship ... KQL, and related technologies. * Follow established security, change management, incident ...
This is a permanent, full-time position based in the United States and requires U.S. citizenship ... KQL, and related technologies. * Follow established security, change management, incident ...
... KQL, and PowerShell. * Hands-on experience administering enterprise network infrastructure and ... Location: position is full time on-site in our Mclean, VA office. Preferred Qualifications:
... KQL, and PowerShell. * Hands-on experience administering enterprise network infrastructure and ... Location: position is full time on-site in our Mclean, VA office. Preferred Qualifications:
Full Time Kql information
See salary details
$11.30 - $21.85
12% of jobs
$21.85 - $32.41
3% of jobs
$42.70 is the 25th percentile. Wages below this are outliers.
$32.41 - $42.96
11% of jobs
$42.96 - $53.52
11% of jobs
The median wage is $61.43 / hr.
$53.52 - $64.07
19% of jobs
$64.07 - $74.63
18% of jobs
$78.59 is the 75th percentile. Wages above this are outliers.
$74.63 - $85.18
6% of jobs
$85.18 - $95.74
2% of jobs
$95.74 - $106.29
3% of jobs
$106.29 - $116.85
0% of jobs
$116.85 - $127.40
16% of jobs
$11
$68
$127
How much do full time kql jobs pay per hour?
What are full time KQL jobs?
What are the key skills and qualifications needed to thrive as a Full Time KQL (Kusto Query Language) Analyst, and why are they important?
What are some common challenges faced when working full-time with KQL (Kusto Query Language) in a data analyst or engineering role?

Full-time
Posted 27 days ago
Job description
Full-time
Description
EOA Technologies is seeking a System Engineer on one of our subcontracts. This is a full-time position offering the opportunity to support a U.S. Government customer. You will serve as a principal technical leader and subject matter expert within the agencies Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.
Essential Duties and Responsibilities:
- Leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI).
- This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction and monitoring overall endpoint health at scale.
- The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules.
- Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program.
Requirements
To be considered for this position you must have the following:
- Possess an active TS/SCI with Polygraph security clearance
- Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
- Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
- Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
- Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.
- Twenty (20) years' experience as a SE in programs and contracts of similar scope, type and complexity is required. Demonstrated experience in planning and leading Systems Engineering efforts is required.
- Bachelor's degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline from an accredited college or university is required.
- Five (5) years of additional SE experience may be substituted for a bachelor's degree.
Desired:
- Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
- Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
- Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
- Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.
Employment decisions are based solely on qualifications, merit, and business needs - not on any protected characteristic. EOA Technologies, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, ancestry, marital status, religious affiliation, hairstyle, or any other characteristic protected by federal, state or local laws. EOA is committed to providing reasonable accommodations when feasible to individuals with disabilities.