Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). * Trellix HX ...
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). * Trellix HX ...
The Data Insights & Visualization Practitioner is responsible for building and maintaining data reporting solutions across Microsoft cloud environments using SQL, KQL, Kusto, Azure Data Explorer ...
The Data Insights & Visualization Practitioner is responsible for building and maintaining data reporting solutions across Microsoft cloud environments using SQL, KQL, Kusto, Azure Data Explorer ...
Senior Cybersecurity Engineer
Washington, DC · On-site
$111K - $170K/yr
Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring. * Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 ...
Senior Cybersecurity Engineer
Washington, DC · On-site
$111K - $170K/yr
Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring. * Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 ...
Endpoint Security Eng (MDE & Trellix) [$301k/yr+] TS/SCI-FS Poly with Security Clearance
Annapolis Junction, MD · On-site
$301K/yr
We are looking for an Endpoint Security Engineer to architect, deploy, and manage defense-in-depth threat protection solutions across air-gapped networks using Microsoft Defender (MDE), KQL, and ...
Endpoint Security Eng (MDE & Trellix) [$301k/yr+] TS/SCI-FS Poly with Security Clearance
Annapolis Junction, MD · On-site
$301K/yr
We are looking for an Endpoint Security Engineer to architect, deploy, and manage defense-in-depth threat protection solutions across air-gapped networks using Microsoft Defender (MDE), KQL, and ...
Senior Cybersecurity Engineer with Security Clearance
Washington, DC · On-site
$111K - $170K/yr
Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring. * Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 ...
Senior Cybersecurity Engineer with Security Clearance
Washington, DC · On-site
$111K - $170K/yr
Develop advanced KQL queries for threat hunting, compliance reporting, and security monitoring. * Partner with Infrastructure teams to harden Windows Server, Windows 11, Azure, and Microsoft 365 ...
Endpoint Security Eng (MDE & Trellix) [$301k/yr+] TS/SCI-FS Poly with Security Clearance
Annapolis Junction, MD · On-site
$301K/yr
We are looking for an Endpoint Security Engineer to architect, deploy, and manage defense-in-depth threat protection solutions across air-gapped networks using Microsoft Defender (MDE), KQL, and ...
Endpoint Security Eng (MDE & Trellix) [$301k/yr+] TS/SCI-FS Poly with Security Clearance
Annapolis Junction, MD · On-site
$301K/yr
We are looking for an Endpoint Security Engineer to architect, deploy, and manage defense-in-depth threat protection solutions across air-gapped networks using Microsoft Defender (MDE), KQL, and ...
Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives. * Tune detection sets to raise security-relevant events for triage and response teams. * Maintain ...
Write and optimize KQL queries for Sentinel to improve detection fidelity and reduce false positives. * Tune detection sets to raise security-relevant events for triage and response teams. * Maintain ...
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
ELK / ESS Engineer
Mclean, VA · On-site
Utilize aggregations, date histograms, and filters (KQL) to analyze large datasets and ensure fast dashboard response times. * Alerting & Monitoring: Set up threshold-based alerts (Watcher) and ...
Quick apply
ELK / ESS Engineer
Mclean, VA · On-site
Utilize aggregations, date histograms, and filters (KQL) to analyze large datasets and ensure fast dashboard response times. * Alerting & Monitoring: Set up threshold-based alerts (Watcher) and ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
Systems Engineer III
Odenton, MD · On-site
... KQL) queries, and YARA detection rules. • Provide advanced technical support and forensic expertise during high-priority cybersecurity incidents. • Serve as the primary technical advisor to ...
Systems Engineer III
Odenton, MD · On-site
... KQL) queries, and YARA detection rules. • Provide advanced technical support and forensic expertise during high-priority cybersecurity incidents. • Serve as the primary technical advisor to ...
Endpoint Security Architect
Annapolis Junction, MD · On-site
$66.50 - $85.75/hr
... KQL) and YARA rules. • Act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical ...
Endpoint Security Architect
Annapolis Junction, MD · On-site
$66.50 - $85.75/hr
... KQL) and YARA rules. • Act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical ...
Senior Cloud Security Engineer - Cleared (Polygraph)
Reston, VA · On-site
$119K - $163K/yr
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture. • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
Senior Cloud Security Engineer - Cleared (Polygraph)
Reston, VA · On-site
$119K - $163K/yr
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture. • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
Senior Cloud Security Engineer - Cleared (Polygraph)
Reston, VA · On-site
$119K - $163K/yr
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture. • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
Senior Cloud Security Engineer - Cleared (Polygraph)
Reston, VA · On-site
$119K - $163K/yr
... KQL (Kusto Query Language) queries to create reports, dashboards, and alerts that enhance visibility into security posture. • Collaborate with cross-functional IT, DevSecOps, and mission teams to ...
Azure Sentinel Engineer
Annapolis, MD · On-site
$54.50 - $67.50/hr
Demonstrated background developing of analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting and KQL queries for data normalization and parsing capabilities within Log Analytics ...
Azure Sentinel Engineer
Annapolis, MD · On-site
$54.50 - $67.50/hr
Demonstrated background developing of analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting and KQL queries for data normalization and parsing capabilities within Log Analytics ...
... KQL) and YARA rules * Act as a primary technical advisor to Government stakeholders on system risks and engineering considerations * Provide advanced forensic support to the SOC during critical high ...
... KQL) and YARA rules * Act as a primary technical advisor to Government stakeholders on system risks and engineering considerations * Provide advanced forensic support to the SOC during critical high ...
4272 Senior Security Engineer with Security Clearance
Quantico, VA · On-site
$123K - $169K/yr
Build and maintain detections-as-code: author and version KQL/SPL analytics, watchlists, and entity behavior rules with MITRE ATT&CK coverage. * Administer a proactive threat-hunting program using ...
4272 Senior Security Engineer with Security Clearance
Quantico, VA · On-site
$123K - $169K/yr
Build and maintain detections-as-code: author and version KQL/SPL analytics, watchlists, and entity behavior rules with MITRE ATT&CK coverage. * Administer a proactive threat-hunting program using ...
Systems Engineer 3 (EDR)
Linthicum, MD · On-site
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). • Trellix HX ...
Systems Engineer 3 (EDR)
Linthicum, MD · On-site
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). • Trellix HX ...
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).* Trellix HX ...
Quick apply
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).* Trellix HX ...
Kql information
See Washington salary details
$12.80 - $24.75
12% of jobs
$24.75 - $36.71
3% of jobs
$48.36 is the 25th percentile. Wages below this are outliers.
$36.71 - $48.66
11% of jobs
$48.66 - $60.61
11% of jobs
The median wage is $69.58 / hr.
$60.61 - $72.57
19% of jobs
$72.57 - $84.52
18% of jobs
$89.01 is the 75th percentile. Wages above this are outliers.
$84.52 - $96.48
6% of jobs
$96.48 - $108.43
2% of jobs
$108.43 - $120.39
3% of jobs
$120.39 - $132.34
0% of jobs
$132.34 - $144.30
16% of jobs
$12
$77
$144
How much do kql jobs pay per hour?
How does a KQL (Kusto Query Language) specialist typically collaborate with security and operations teams in an organization?
What is a KQL search?
What is the difference between Kql vs Log Analyst?
| Aspect | Kql | Log Analyst |
|---|---|---|
| Required Credentials | Knowledge of Kusto Query Language, certifications in data analysis or cloud platforms | Experience with log analysis, certifications in cybersecurity or IT support |
| Work Environment | Primarily cloud-based, data analytics platforms, security monitoring | IT departments, cybersecurity teams, network operations centers |
| Employer & Industry Usage | Tech companies, cloud service providers, security firms | IT firms, cybersecurity agencies, enterprise IT departments |
| Search & Comparison Intent | Understanding Kql for data querying and analysis | Comparing roles in log analysis and security monitoring |
While both Kql and Log Analyst roles involve working with data and logs, Kql focuses on writing queries using the Kusto Query Language for data analysis in cloud environments. Log Analysts interpret and manage log data for security and troubleshooting. The roles often overlap but differ mainly in technical focus and tools used.
What are the key skills and qualifications needed to thrive as a KQL (Kusto Query Language) specialist?
What is a KQL (Kusto Query Language) developer?
What jobs use KQL?
- Manager Cornerstone Lms
- Remote Okta Administrator
- Remote Oracle Cloud Administrator
- Senior M365 Administrator
- Weekend Aws Sysops Administrator
- No Experience Vmware
- Monday Through Friday Microsoft 365 Security Administrator
- Contract M365 Administrator
- Nasa Administrator Salary
- Fulltime Linux Windows System Administrator

Enterprise - Systems Engineer - MDE, Windows, KQL
Annapolis Junction, MD • On-site
Full-time
Medical, Dental, Vision, Life, Retirement, PTO
Re-posted 4 days ago
Job description
Our staff includes technical experts working across multiple disciplines, bringing diverse perspectives to every project. We are seeking engineers who wish to grow their careers and want to become part of a technically strong and growth-oriented company focused on bringing innovative solutions to the difficult mission problems facing our customers.
Description
We are seeking a skilled Systems Engineer who serves as a principal technical leader and subject matter expert within the National Security Agency's Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.
The Systems Engineer is responsible for leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI). This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale. The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules. Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program.
Clearance
A current Top-Secret/SCI with polygraph security clearance is required. Candidates cannot be sponsored or nominated for a government security clearance under this position.
Experience
Twenty (20) years experience as a SE in programs and contracts of similar scope, type and complexity is required. Demonstrated experience in planning and leading Systems Engineering efforts is required. Bachelor's degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline from an accredited college or university is required. Five (5) years of additional SE experience may be substituted for a bachelor's degree.
Required skills:
- Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
- Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
- Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
- Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.
Desired skills:
- Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
- Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
- Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
- Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for
developing technical leadership pipelines.
Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $240,000 - $275,000.
Wealth Benefits:
- Above Market Hourly Pay
- 11% Roth or Traditional 401k with Immediate Vesting and Deposit
- Spot Bonuses for Assisting with Business Development and Company Growth
- Professional Development Bonuses for Certificates and Degrees
- Company subsidized Medical Coverage
- 100% Company Paid Vision and Dental Coverage
- 100% Company Paid Long Term Disability, Short Term Disability, and Group Life Insurance
- Monthly Wellness Reimbursement
- Paid Time Off with Flexible Work Schedules and Birthday Off
- Amazon Prime Membership andMonthly Internet Reimbursement
- Technology and Productivity Allowance for Equipment and Supplies
- Morale Building and Company Events to Celebrate our Successes and Build our Community
- Onboarding and Annual Swag
- Company Paid Professional Development and Training
Referrals & Inquiries
Do you know a cleared professional seeking to advance their career? Interested in earning some extra cash? If so, refer them to us with their name and contact details, and you could be eligible for a referral bonus of up to $10,000 for each successful hire.
Not seeing the right position right now? Reach out to us, and we'll notify you as new contracts and opportunities become available!
Please send referrals and inquiries to:
jobs@eriasventures.com
To learn more about our company visit our webpage or LinkedIn.
About Erias Ventures
Sourced by ZipRecruiter
Industry
It services
Company size
1 - 10 Employees
Headquarters location
Annapolis Junction, MD, US
Year founded
2018