Demonstrates significant experience with Microsoft Sentinel: alert monitoring, KQL log queries, entity analysis, runbooks, or escalation. * Demonstrates significant experience with Azure skills ...
Demonstrates significant experience with Microsoft Sentinel: alert monitoring, KQL log queries, entity analysis, runbooks, or escalation. * Demonstrates significant experience with Azure skills ...
Enterprise Data Warehouse (EDW) ETL/Data Engineer
Springfield, IL · On-site
$113K - $136K/yr
... and KQL • Support code reviews, branching strategies, release management, and engineering standards across environments • Participate in troubleshooting and production incident response for ...
Enterprise Data Warehouse (EDW) ETL/Data Engineer
Springfield, IL · On-site
$113K - $136K/yr
... and KQL • Support code reviews, branching strategies, release management, and engineering standards across environments • Participate in troubleshooting and production incident response for ...
Senior DevOps Engineer
Denver, CO · On-site
$133K - $171K/yr
Implement end-to-end monitoring and observability using Azure Monitor, Log Analytics, KQL, Splunk, AppDynamics, Prometheus, and Grafana . * Provide advanced production troubleshooting, RCA, incident ...
Senior DevOps Engineer
Denver, CO · On-site
$133K - $171K/yr
Implement end-to-end monitoring and observability using Azure Monitor, Log Analytics, KQL, Splunk, AppDynamics, Prometheus, and Grafana . * Provide advanced production troubleshooting, RCA, incident ...
... hunting queries (KQL). · Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles. · Evaluates behavioral anomalies and collaborates with ...
Quick apply
... hunting queries (KQL). · Builds and maintains analytics content, data parsers, normalization rules, and entity behavior profiles. · Evaluates behavioral anomalies and collaborates with ...
Cybersecurity Engineer (PKI And Security Operations)
Euless, TX · Hybrid
$55 - $75/hr
Microsoft Sentinel, KQL, and Detection Engineering * Security Investigations and Threat Analysis * Vulnerability Remediation and Risk Reduction * Exposure to PKI, Certificates, or Identity-Based ...
Cybersecurity Engineer (PKI And Security Operations)
Euless, TX · Hybrid
$55 - $75/hr
Microsoft Sentinel, KQL, and Detection Engineering * Security Investigations and Threat Analysis * Vulnerability Remediation and Risk Reduction * Exposure to PKI, Certificates, or Identity-Based ...
IT Support Manager
Atlanta, GA · On-site
The ideal candidate brings strong experience in observability platforms such as Dynatrace and Azure Application Insights, advanced KQL-based diagnostics, and the ability to troubleshoot complex ...
IT Support Manager
Atlanta, GA · On-site
The ideal candidate brings strong experience in observability platforms such as Dynatrace and Azure Application Insights, advanced KQL-based diagnostics, and the ability to troubleshoot complex ...
Azure Data Architect
Denver, CO · On-site
$65.25 - $85.25/hr
Architect using Microsoft Fabric Real-Time Intelligence (Eventhouse/KQL), Lakehouse, and Fabric SQL DB, or equivalent modern data platforms * Define data retention, partitioning, indexing, and data ...
Azure Data Architect
Denver, CO · On-site
$65.25 - $85.25/hr
Architect using Microsoft Fabric Real-Time Intelligence (Eventhouse/KQL), Lakehouse, and Fabric SQL DB, or equivalent modern data platforms * Define data retention, partitioning, indexing, and data ...
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Quick apply
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Technology Lead | Cloud Platform | Azure Development & Solution Architecting
Chicago, IL · On-site
$65.50 - $85.25/hr
Yes Must Have Skills: • CI/CD pipelines, • Automation • IaaC - Terraform • Yaml • Liquibase • Azure Cloud Infrastructure • Grafana • Prometheus • KQL • AppInsights • Monitoring ...
Technology Lead | Cloud Platform | Azure Development & Solution Architecting
Chicago, IL · On-site
$65.50 - $85.25/hr
Yes Must Have Skills: • CI/CD pipelines, • Automation • IaaC - Terraform • Yaml • Liquibase • Azure Cloud Infrastructure • Grafana • Prometheus • KQL • AppInsights • Monitoring ...
Microsoft Administrator
Austin, TX · On-site
$60K - $75K/yr
Microsoft Sentinel and KQL queries/detection engineering * PowerShell scripting and automation * SIEM platforms * Security operations or SOC experience Preferred Certifications ...
Microsoft Administrator
Austin, TX · On-site
$60K - $75K/yr
Microsoft Sentinel and KQL queries/detection engineering * PowerShell scripting and automation * SIEM platforms * Security operations or SOC experience Preferred Certifications ...
Enterprise Data Warehouse (EDW) ETL/Data Engineer
Springfield, IL · On-site
$113K - $136K/yr
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Enterprise Data Warehouse (EDW) ETL/Data Engineer
Springfield, IL · On-site
$113K - $136K/yr
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Build monitoring, logging, and auditing solutions using Azure Monitor, Log Analytics, and KQL * Support code reviews, branching strategies, release management, and engineering standards across ...
Data Engineer (Kusto)
Bellevue, WA · On-site
$86K - $113K/yr
... Kusto (KQL), SQL, Excel to analyze large datasets, run investigations, and resolve issues • Apply a data-driven, analytical mindset (deep dives, hypothesis testing, root cause analysis) • ...
Data Engineer (Kusto)
Bellevue, WA · On-site
$86K - $113K/yr
... Kusto (KQL), SQL, Excel to analyze large datasets, run investigations, and resolve issues • Apply a data-driven, analytical mindset (deep dives, hypothesis testing, root cause analysis) • ...
Elastic Search Engineer
Philadelphia, PA · On-site
Expertise in scripting (Python/Bash), automation tools (Ansible/Terraform), JSON, and KQL. • Proven Experience in Building Dashboard and monitoring alerts using ELK stack.
Elastic Search Engineer
Philadelphia, PA · On-site
Expertise in scripting (Python/Bash), automation tools (Ansible/Terraform), JSON, and KQL. • Proven Experience in Building Dashboard and monitoring alerts using ELK stack.
Microsoft Administrator
Austin, TX · On-site
$60K - $75K/yr
Microsoft Sentinel and KQL queries/detection engineering * PowerShell scripting and automation * SIEM platforms * Security operations or SOC experience Preferred Certifications & Training ...
Microsoft Administrator
Austin, TX · On-site
$60K - $75K/yr
Microsoft Sentinel and KQL queries/detection engineering * PowerShell scripting and automation * SIEM platforms * Security operations or SOC experience Preferred Certifications & Training ...
Authentication Engineer (Entra / AD) - 3667093
New York, NY · On-site
$70 - $75/hr
Build and maintain monitoring solutions using Splunk and KQL for identity threat detection, incident investigation, and compliance reporting * Engineer Zero Trust security controls and Privileged ...
Authentication Engineer (Entra / AD) - 3667093
New York, NY · On-site
$70 - $75/hr
Build and maintain monitoring solutions using Splunk and KQL for identity threat detection, incident investigation, and compliance reporting * Engineer Zero Trust security controls and Privileged ...
Senior Security Engineer
Indianapolis, IN · On-site
$109K - $150K/yr
Own detection engineering and IR day to day -- KQL detections in Log Analytics, Azure Monitor dashboards, SIEM forwarding via Event Hub, and incident.io alerting and runbooks. The Security Lead steps ...
Senior Security Engineer
Indianapolis, IN · On-site
$109K - $150K/yr
Own detection engineering and IR day to day -- KQL detections in Log Analytics, Azure Monitor dashboards, SIEM forwarding via Event Hub, and incident.io alerting and runbooks. The Security Lead steps ...
ELK / ESS Engineer
Mclean, VA · On-site
Utilize aggregations, date histograms, and filters (KQL) to analyze large datasets and ensure fast dashboard response times. * Alerting & Monitoring: Set up threshold-based alerts (Watcher) and ...
Quick apply
ELK / ESS Engineer
Mclean, VA · On-site
Utilize aggregations, date histograms, and filters (KQL) to analyze large datasets and ensure fast dashboard response times. * Alerting & Monitoring: Set up threshold-based alerts (Watcher) and ...
System Engineer 3
Ops, ND · On-site
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). * Trellix HX ...
System Engineer 3
Ops, ND · On-site
Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL). * Trellix HX ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
Detection Engineer
Arlington, VA · On-site
... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...
Kql information
See salary details
$11.30 - $21.85
12% of jobs
$21.85 - $32.41
3% of jobs
$42.70 is the 25th percentile. Wages below this are outliers.
$32.41 - $42.96
11% of jobs
$42.96 - $53.52
11% of jobs
The median wage is $61.43 / hr.
$53.52 - $64.07
19% of jobs
$64.07 - $74.63
18% of jobs
$78.59 is the 75th percentile. Wages above this are outliers.
$74.63 - $85.18
6% of jobs
$85.18 - $95.74
2% of jobs
$95.74 - $106.29
3% of jobs
$106.29 - $116.85
0% of jobs
$116.85 - $127.40
16% of jobs
$11
$68
$127
How much do kql jobs pay per hour?
What is a KQL (Kusto Query Language) developer?
What are the key skills and qualifications needed to thrive as a KQL (Kusto Query Language) specialist?
How does a KQL (Kusto Query Language) specialist typically collaborate with security and operations teams in an organization?
What is the difference between Kql vs Log Analyst?
| Aspect | Kql | Log Analyst |
|---|---|---|
| Required Credentials | Knowledge of Kusto Query Language, certifications in data analysis or cloud platforms | Experience with log analysis, certifications in cybersecurity or IT support |
| Work Environment | Primarily cloud-based, data analytics platforms, security monitoring | IT departments, cybersecurity teams, network operations centers |
| Employer & Industry Usage | Tech companies, cloud service providers, security firms | IT firms, cybersecurity agencies, enterprise IT departments |
| Search & Comparison Intent | Understanding Kql for data querying and analysis | Comparing roles in log analysis and security monitoring |
While both Kql and Log Analyst roles involve working with data and logs, Kql focuses on writing queries using the Kusto Query Language for data analysis in cloud environments. Log Analysts interpret and manage log data for security and troubleshooting. The roles often overlap but differ mainly in technical focus and tools used.
What jobs use KQL?
What are the most commonly searched types of Kql jobs?
The most popular types of Kql jobs are:
What states have the most Kql jobs?
States with the most job openings for Kql jobs include:
What job categories do people searching Kql jobs look for?
The top searched job categories for Kql jobs are:

Network Engineer
On-site
Other
Posted 9 days ago
Job description
BT-417 – Network Engineer
Location: Tysons (fully on-site, no remote option)
MUST HAVE A POLY CLEARANCE TO APPLY. Those without a Poly clearance will not be considered.
Required Skills:
- Demonstrates experience working with telecommunications carriers, Internet Service Providers (ISPs), cloud providers, OEM vendors, managed service providers, or other third-party service providers.
- Demonstrates experience performing advanced troubleshooting of network, cloud, infrastructure, and security-related incidents.
- Demonstrates experience correlating information from Microsoft Sentinel, Azure, network monitoring systems, network mapping platforms, and other security tools during troubleshooting and incident investigations.
- Demonstrates experience working directly with telecommunications carriers, ISPs, OEM vendors, Microsoft/cloud providers, managed service providers, and other third-party vendors during complex incidents.
- Demonstrates experience validating network, cloud, security, and service availability following maintenance or infrastructure changes.
- Demonstrates experience identifying recurring operational issues and recommending technical, monitoring, process, or automation improvements.
- Demonstrates experience reviewing maintenance scope, affected services, dependencies, and scheduled implementation periods.
- Demonstrates experience monitoring operational impact during maintenance activities and coordinating escalation when unexpected issues occur
Desired Skills:
- Demonstrates experience leading or managing personnel within a NOC, SOC/CSOC, enterprise operations center, or comparable 24x7 technical operations environment.
- Demonstrates progressively responsible experience in enterprise IT operations, network operations, cybersecurity operations, cloud operations, or related technical disciplines.
- Demonstrates experience supporting a Network Operations Center (NOC), Security Operations Center (SOC/CSOC), enterprise IT operations center, or comparable technical operations environment.
- Demonstrates significant experience with Microsoft Sentinel: alert monitoring, KQL log queries, entity analysis, runbooks, or escalation.
- Demonstrates significant experience with Azure skills: portal nav, Monitor/Log Analytics, VMs, Resource Health, or basic networking (VNets/NSGs).
- Demonstrates significant experience with Networking basics: TCP/IP, DNS/DHCP, subnetting, VLANs, routing, firewalls, VPNs, or LAN/WAN.
- Demonstrates significant experience with troubleshooting outages, connectivity, packet loss/latency, or CPU/memory issues.
- Demonstrates experience with tools for topology, paths, assets, segmentation, or vulnerabilities. Demonstrates experience with Kusto Query Language (KQL) for searching, filtering, correlating, and investigating Sentinel and Log Analytics data.
About Bespoke Technologies
Sourced by ZipRecruiter
Industry
Recruiting and staffing services
Company size
11 - 50 Employees
Headquarters location
Alpharetta, GA, US
Year founded
2015