ZipRecruiter

Log In

1

Kql Jobs (NOW HIRING)

Quevera

Systems Engineer III

Odenton, MD · On-site

... KQL) queries, and YARA detection rules. • Provide advanced technical support and forensic expertise during high-priority cybersecurity incidents. • Serve as the primary technical advisor to ...

New

Tror AI for everyone

ELK / ESS Engineer

Mclean, VA · On-site

Utilize aggregations, date histograms, and filters (KQL) to analyze large datasets and ensure fast dashboard response times. * Alerting & Monitoring: Set up threshold-based alerts (Watcher) and ...

TEKsystems

Incident Systems Analyst

Redmond, WA · Remote

$45 - $60/hr

While tools like KQL are important, the role increasingly emphasizes understanding the data and systems, rather than just generating queries, especially as AI augments query development. Two analysts ...

New

Software Technology Inc

Remote Senior BI/Data Engineer

$108K - $147K/yr

Senior Bi/Data Engineer PowerBI, KQL, Azure App Insights, Strong SQL (queries/tuning/performance improvement). Working with real-time high frequency data up to the second, and is refreshing in App ...

Accenture Federal Services

Detection Engineer

... KQL queries for Sentinel to improve detection fidelity and reduce false positives. • Tune detection sets to raise security-relevant events for triage and response teams. • Maintain version ...

WATI

Azure Sentinel Engineer

Annapolis, MD · On-site

$54.50 - $67.50/hr

Demonstrated background developing of analytics rules, incidents, playbooks, notebooks, workbooks, threat hunting and KQL queries for data normalization and parsing capabilities within Log Analytics ...

Eleventh Hire, Inc.

Log Analytics Engineer

Hunt, TX

Proficiency in query languages such as SQL and KQL for data manipulation and analysis. Demonstrated experience in using popular log analytics tools such as Azure Log Analytics, Elasticsearch, Splunk ...

Morgan & Morgan, P.A.

Senior Security Engineer

Orlando, FL

$106K - $146K/yr

Engineer, tune, and operate detections and response workflows across Microsoft Defender XDR and Microsoft Sentinel, including authoring and optimizing KQL queries, analytics rules, workbooks, and ...

Palnar

.Net Application Developer

Nashville, TN · On-site

Strong troubleshooting skills to identify problems on Azure deployed environment by writing queries in Kusto Query Language (KQL) logs and analyzing logs from azure portal in application insights

Palnar

Sr. Net developer

Tampa, FL · On-site

$52 - $66.25/hr

Strong troubleshooting skills to identify problems on Azure deployed environment by writing queries in Kusto Query Language (KQL) logs and analyzing logs from azure portal in application insights

Omni Inclusive

Senior Full Stack Java Engineer

... KQL, Grafana, and Dynatrace. - Hands-on cloud and DevOps experience expected across Azure, OpenShift, AKS, GitHub, GitHub Actions, Artifactory, Docker, and PostgreSQL. - Agile/Scrum experience ...

Staffingine LLC

Validation Engineer

Raleigh, NC · On-site

Collect and analyse logs using Kusto KQL Splunk or equivalent tools for troubleshooting and data analytics * Collaborate with Cross functional teams to ensure lab readiness for validation and ...

next page

Showing results 1-20

All JobsKql Jobs

Kql information

See salary details

$11

$68

$127

How much do kql jobs pay per hour?

As of Jul 1, 2026, the average hourly pay for kql in the United States is $68.14, according to ZipRecruiter salary data. Most workers in this role earn between $45.19 and $86.54 per hour, depending on experience, location, and employer.

How does a KQL (Kusto Query Language) specialist typically collaborate with security and operations teams in an organization?

A KQL specialist often works closely with security analysts, IT operations, and data engineering teams to develop queries that extract actionable insights from large datasets, such as those in Azure Monitor or Microsoft Sentinel. They help translate business or security requirements into effective queries, visualize data trends, and automate alerting mechanisms. Regular collaboration is essential for troubleshooting issues, optimizing query performance, and ensuring that dashboards and reports accurately reflect organizational needs. This teamwork enables rapid detection and response to incidents, as well as continuous improvement of monitoring solutions.

What jobs can I get with Azure?

Jobs related to Azure include roles such as Azure Cloud Engineer, Azure Solutions Architect, and Azure Administrator. These positions typically require skills in cloud computing, familiarity with Azure services, and often certifications like Microsoft Certified: Azure Fundamentals or Azure Solutions Architect Expert.

What is a KQL job?

A KQL job typically involves working with Kusto Query Language (KQL), which is used to query and analyze large datasets in Microsoft Azure services like Azure Monitor, Log Analytics, and Application Insights. Professionals in this role often write and optimize KQL queries to extract insights from logs and telemetry data. They may work as data analysts, security analysts, or cloud engineers, using KQL to troubleshoot issues, monitor system performance, and create reports. Strong analytical skills and experience with Azure environments are usually required for this job.

What is the difference between Kql vs Log Analyst?

AspectKqlLog Analyst
Required CredentialsKnowledge of Kusto Query Language, certifications in data analysis or cloud platformsExperience with log analysis, certifications in cybersecurity or IT support
Work EnvironmentPrimarily cloud-based, data analytics platforms, security monitoringIT departments, cybersecurity teams, network operations centers
Employer & Industry UsageTech companies, cloud service providers, security firmsIT firms, cybersecurity agencies, enterprise IT departments
Search & Comparison IntentUnderstanding Kql for data querying and analysisComparing roles in log analysis and security monitoring

While both Kql and Log Analyst roles involve working with data and logs, Kql focuses on writing queries using the Kusto Query Language for data analysis in cloud environments. Log Analysts interpret and manage log data for security and troubleshooting. The roles often overlap but differ mainly in technical focus and tools used.

What jobs can big data do?

Big data roles include data analyst, data engineer, data scientist, and business intelligence analyst. These jobs involve analyzing large datasets, developing data pipelines, and creating insights to support decision-making, often requiring skills in SQL, Python, or Hadoop. Professionals in these roles work in various industries such as finance, healthcare, and technology.

What are the key skills and qualifications needed to thrive as a KQL (Kusto Query Language) Specialist, and why are they important?

To thrive as a KQL Specialist, you need strong expertise in data analysis, proficiency with Kusto Query Language, and experience with data visualization and log analytics platforms, typically supported by a degree in computer science or related fields. Familiarity with Microsoft Azure Monitor, Azure Data Explorer, and related certification such as Microsoft Certified: Azure Data Fundamentals is common. Analytical thinking, problem-solving, and effective communication are crucial soft skills for interpreting data insights and collaborating with cross-functional teams. These skills are essential for extracting actionable intelligence from large datasets and supporting informed business decisions.

What are KQL (Kusto Query Language) developers?

KQL (Kusto Query Language) developers are professionals who specialize in writing and optimizing queries using KQL, primarily for Microsoft Azure Data Explorer, Log Analytics, and other services that use Kusto databases. Their responsibilities include designing data queries, building dashboards, analyzing large datasets, and troubleshooting issues within the data pipelines. KQL developers are skilled in constructing efficient queries to retrieve, manipulate, and visualize data, helping organizations gain insights from their logs and telemetry. They often work closely with data engineers, analysts, and IT teams to ensure accurate and actionable data reporting.

What is a KQL job in Sentinel Data Lake?

A KQL job in Sentinel Data Lake involves writing and executing Kusto Query Language (KQL) queries to analyze and retrieve data stored within Azure Sentinel's data platform. These roles typically require knowledge of data analysis, security monitoring, and familiarity with Azure services and KQL syntax. The job may also involve creating dashboards, alerts, and reports based on query results.

What jobs use KQL?

Jobs that use KQL (Kusto Query Language) are typically in data analysis, cybersecurity, and IT operations roles, such as security analysts, data analysts, and cloud engineers. These professionals use KQL to query large datasets in platforms like Azure Data Explorer and Microsoft Sentinel for monitoring, security, and data insights.
More about Kql jobs
What cities are hiring for Kql jobs? Cities with the most Kql job openings:
What are the most commonly searched types of Kql jobs? The most popular types of Kql jobs are:
What states have the most Kql jobs? States with the most job openings for Kql jobs include:
What job categories do people searching Kql jobs look for? The top searched job categories for Kql jobs are:
Kql jobs near you
Infographic showing various Kql job openings in the United States as of June 2026, with employment types broken down into 97% Full Time, and 3% Contract. Highlights an 69% Physical, 17% Hybrid, and 14% Remote job distribution, with an average salary of $141,728 per year, or $68.1 per hour.
Systems Engineer III

Systems Engineer III

Quevera

Odenton, MD • On-site

Full-time

Posted 2 days ago

Job description

Job Summary:
Quevera is seeking a highly skilled Systems Engineer III with an active TS/SCI clearance with Polygraph to support mission-critical programs. In this role, you will serve as a senior technical leader supporting the National Security Agency's Enterprise Endpoint Detection and Response (EDR) Program, driving the design, deployment, and optimization of enterprise endpoint security solutions.
Responsibilities:
• Lead the architecture, engineering, deployment, and lifecycle management of Microsoft Defender for Endpoint (MDE) and Trellix HX across enterprise environments.
• Design and implement endpoint security solutions supporting on-premises, cloud, and virtual desktop infrastructure (VDI) environments.
• Develop system engineering documentation, implementation plans, and deployment strategies for enterprise endpoint protection platforms.
• Configure and optimize endpoint agent policies, exclusions, and platform settings to improve operational performance.
• Monitor endpoint health, system performance, and enterprise security posture across large-scale environments.
• Collaborate with threat hunting and cyber intelligence teams to translate threat intelligence into custom Indicators of Compromise (IOCs), Kusto Query Language (KQL) queries, and YARA detection rules.
• Provide advanced technical support and forensic expertise during high-priority cybersecurity incidents.
• Serve as the primary technical advisor to Government stakeholders regarding endpoint security architecture, engineering risks, and implementation strategies.
• Mentor junior and mid-level engineers while promoting engineering best practices and technical excellence.
Qualifications:
Required:
• Active TS/SCI clearance with Polygraph required.
• Demonstrated engineering expertise with Microsoft Defender for Endpoint (MDE), including architecture, deployment through MECM/SCCM or Intune, policy ring management, and advanced threat hunting using Kusto Query Language (KQL).
• Demonstrated experience engineering, deploying, and administering Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted environments.
• Experience creating OpenIOC and YARA detection rules.
• In-depth knowledge of Windows, Linux, and macOS operating systems, including file systems, registry structures, and process execution.
• Compliance with DoD 8570/8140 IAM Level II or Level III certification requirements.
Preferred:
• Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix engineering certifications.
• Experience with Model-Based Systems Engineering (MBSE) and Cameo.
• Experience using Jira and Confluence within the Atlassian Suite.
• Familiarity with NSA Technical Manual standards, including NSA DS-89.
• Understanding of defense-in-depth engineering principles.
• Strong collaboration, communication, and technical leadership skills.
• Experience mentoring engineering teams and developing technical talent.
Company:
Quevera offers consulting and software engineering services. Founded in 2013, the company is headquartered in Columbia, USA, with a team of 51-200 employees. The company is currently Growth Stage.

Apply