# KQL jobs

**182 open KQL jobs** from 135 companies, 28 of them new this week. Where pay is stated, the middle half offers **$128,000–$175,000** a year.

Updated 14 Nov 2026 · [How we count](https://roleford.com/how-we-count)

## Numbers

- Open jobs: 182
- New this week: 28
- Companies hiring: 135
- Median stated pay: $148,000 a year

## Pay where stated

The middle half offers $128,000–$175,000 a year; lowest $96,000, median $148,000, highest $241,000. From the 48 of 182 postings that state pay in US dollars.

## Newest jobs

| Title | Company | Place | Pay | Posted |
| --- | --- | --- | --- | --- |
| Security Expert | Connectis_ | Warsaw, on-site | PLN 110–PLN 125/h | 13 Nov |
| Senior Detection Engineer | SentinelOne | India, on-site |  | 12 Nov |
| Security Incident Response Engineer | Acrisure Technology Group, LLC | Atlanta, on-site |  | 12 Nov |
| Security Architect - Security Operations | Skillfield | Melbourne, on-site |  | 12 Nov |
| Cybersecurity Engineer (Security Operations, CIOO) | Assurity Trusted Solutions | Singapore, on-site |  | 12 Nov |
| IN_Senior Associate_ DevOps & Cloud Migration Engineer_Application Technology_Advisory_Chennai | PwC | Chennai, on-site |  | 12 Nov |
| Lead Detection and Response Engineer | Skillfield | Melbourne, on-site |  | 12 Nov |
| Network Observability Engineer | Leidos | Remote, United States | $73.5k–$132.8k | 12 Nov |
| Insider Risk – Rule Management Engineer (f/m/x) | DBOI Global Services (UK) Limited | Bucharest, on-site |  | 12 Nov |
| [Endpoint Security Engineer, Technology](https://roleford.com/job/endpoint-security-engineer-technology-point72-cff24bafc804.md) | Point72 | New York, on-site | $170k–$250k | 11 Nov |
| Security Engineer – AWS Security Incident Response, Cloud Security, AI Security, EDR & SIEM | Alcon Research, LLC. Company | Bengaluru, on-site |  | 11 Nov |
| IN_Senior Associate_ DevOps & Cloud Migration Engineer_Application Technology_Advisory_Bangalore | PwC | Bengaluru Millenia, on-site |  | 11 Nov |
| Azure Cloud Engineer | Arctiq | Blue Bell, on-site | $125k–$135k | 11 Nov |
| [Lead Cybersecurity Engineer (Hybrid)](https://roleford.com/job/lead-cybersecurity-engineer-hybrid-american-family-insurance-b7e5b786a6fc.md) | American Family Insurance | Ma Boston, on-site | $113k–$194k | 11 Nov |
| Cloud / DevOps Engineer - Contract | ICON OUTSOURCING | Singapore, on-site | SGD 7.5k–SGD 9.5k/mo | 11 Nov |
| Teknikspecialist M365 | Stockholms Universitet | Stockholm, on-site |  | 10 Nov |
| Cloud Infrastructure Engineer | Arctiq | Blue Bell, on-site |  | 10 Nov |
| Azure Platform & Devops Infrastructure Engineer (Agency Contract) | PERSOL SINGAPORE PTE. LTD. | Singapore, on-site | SGD 8k–SGD 12k/mo | 10 Nov |
| Senior Azure Infrastructure Engineer — Terraform & Azure DevOps | HELIUS TECHNOLOGIES PTE. LTD. | Singapore, on-site | SGD 7k–SGD 9k/mo | 10 Nov |
| Platform Engineer (Azure) | Ascend Analytics | Boulder, on-site | $85k–$115k | 10 Nov |

## Often asked with these jobs

Security (118), Observability (112), Azure (108), Alerting (104), Detection engineering (100), Identity and access (95), Python (92), PowerShell (87)

## Hiring most

- Arctiq: 5
- PwC: 5
- Microsoft: 3
- Altera Digital Health: 2
- Cyclotron: 2

## KQL elsewhere

- [Remote KQL jobs](https://roleford.com/jobs/kql/remote): 87
- [Remote KQL jobs in North America](https://roleford.com/jobs/kql/remote-north-america): 48

## By language and framework

- [Python jobs](https://roleford.com/jobs/python): 26,024
- [PowerShell jobs](https://roleford.com/jobs/powershell): 2,086
- [MITRE jobs](https://roleford.com/jobs/mitre): 315
- [SQL jobs](https://roleford.com/jobs/sql): 15,435

## By role

- [Security jobs](https://roleford.com/jobs/security): 5,579
- [DevOps and platform jobs](https://roleford.com/jobs/devops-and-platform): 9,853
- [IT and network jobs](https://roleford.com/jobs/it-and-network): 4,094
- [Data engineering jobs](https://roleford.com/jobs/data-engineering): 7,828

## How we count

- **Open job**: A posting listed at our last daily refresh. When it comes down, it leaves every count at the next refresh.
- **New**: Posted in the 24 hours to 02:45 UTC ("new today") or the 7 days to it ("new this week"), by the date the posting gives. A posting dated by day only counts on that day; postings that give no date are never counted as new.
- **Place and remote**: Where the posting says you can work; a job open in two places counts in both. Remote in Europe: remote, and open to people in Europe. Remote in North America: the same for the US, Canada and Mexico. Work from anywhere: remote, and the posting says you can work from anywhere.
- **Company**: The employer named in the posting; recruiting agencies and job boards are left out of company counts.
- **Pay**: Each posting's stated range as a yearly amount, in the currency most of these postings state; postings in other currencies are left out of the figure. "Middle half" is the 25th to the 75th percentile. Shown only with 10 or more such postings.
- **Skills and roles**: The skills and roles we've read so far, about a third of open postings, so skill and role counts are lower than the real number.
- **When a page exists**: A page appears at 30 open jobs and stays while it has 15. Below that it stays up for visitors but asks search engines not to list it, and after 60 days that low it leads to a bigger page.
- Counts were refreshed at 08:00 UTC.

More: [How we count](https://roleford.com/how-we-count)

## Reusing this page

Quote these numbers with a visible, followable link to https://roleford.com/jobs/kql. Not for AI training. Rules: https://roleford.com/reuse