1 to 25 of 37 MITRE ATT&CK Jobs in the South East

conditions. Adversary Relevance: Assess the actors, motivations, campaigns, and outcomes most relevant to each customer. Threat Behaviour: Use recognised frameworks, including MITRE ATT&CK, to describe adversary behaviour and identify defensive opportunities. Vulnerability Intelligence: Assess vulnerabilities, exploitation evidence, threat relevance, potential impact, and customer exposure. … assessments and proportionate actions. Identify and analyse relevant threat actors, campaigns, malware, and infrastructure. B. Threat Behaviour and Defensive Relevance Use MITRE ATT&CK to connect actor and campaign activity with techniques, defensive coverage, and hunting opportunities. Maintain structured analysis that supports early warning, prioritisation ...

designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations, and engaging with … customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops ...

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

security detections, analytics, use cases, investigation methodologies, playbooks, and response procedures, including validating detection coverage against realistic adversary behaviors and the MITRE ATT&CK framework.* Drive automation and orchestration across security operations, using security queries, scripting, and automation to analyze data, accelerate investigations, reduce repetitive … Management, Curiosity, Critical thinking, Problem-solving, Technical Writing, Continuous improvement, Communication, Mentoring/Coaching.* Advanced threat investigation, Threat actor TTP analysis (MITRE ATT&CK), Threat Hunting.**Desirable*** Agentic AI.* Malware analysis.* Digital forensics and evidence preservation.## Rewards & benefitsExplore the rewards and benefits that help ...

suspicious patterns, likely attack paths and Indicators of Compromise (IOCs), improving investigative confidence and speed.• Map observed adversary behaviour to relevant MITRE ATT&CK tactics, techniques and sub-techniques, supporting consistent analysis, clearer communication and visibility of detection coverage.• Create, test and tune threat-hunting … business impact.• Current awareness of malware, ransomware and advanced persistent threat activity affecting cloud and on-premises environments.• Practical knowledge of MITRE ATT&CK and its use in describing tactics, techniques, sub-techniques and observed adversary behaviour.• Experience working within change-controlled environments and following ...

suspicious patterns, likely attack paths and Indicators of Compromise (IOCs), improving investigative confidence and speed. Map observed adversary behaviour to relevant MITRE ATT&CK tactics, techniques and sub-techniques, supporting consistent analysis, clearer communication and visibility of detection coverage. Create, test and tune threat-hunting … business impact. Current awareness of malware, ransomware and advanced persistent threat activity affecting cloud and on-premises environments. Practical knowledge of MITRE ATT&CK and its use in describing tactics, techniques, sub-techniques and observed adversary behaviour. Experience working within change-controlled environments and following ...

Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting queries, map coverage to MITRE ATT&CK, track false‐positive rates, and retire rules that no longer earn their place. Automate response with automation rules and Logic Apps playbooks … rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule mapped to MITRE ATT&CK, and explain why it fires and why it does not. Incident response on a cloud platform: triage, containment, evidence collection ...

cloud, identity and vulnerability management. Introduce useful automation, including enrichment, case creation, triage and response playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment … response orchestration. Sound judgement on investigations, evidence handling and risk‐based vulnerability prioritisation, with familiarity with relevant frameworks such as MITRE ATT&CK, NIST, Cyber Essentials and ISO 27001. The ability to lead analysts, make decisions under pressure and explain technical risks clearly to senior ...

Leadership.* Capability Development and Maturity: Accountable for continuous improvement of cyber defence maturity aligned to NIST CSF and recognised frameworks (e.g. MITRE ATT&CK)* Leadership and People: Accountable for building and leading a high-performing, threat led cyber defence team with clear accountability and skills … professional organisation (e.g. BCS, ISACA, IAPP).* Strong understanding of threat actor tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK.* Able to communicate effectively at all levels with very good written and oral skills.* Highly organized and capable of managing multiple concurrent tasks ...

firewalls and VPNs. Experience analysing Windows and Linux system, network and application logs. Knowledge of security frameworks such as MITRE ATT&CK, NIST CSF or ISO 27001. Strong analytical and problem-solving skills with close attention to detail. Strong technical documentation and reporting skills. Eligible ...

findings to both technical and non-technical stakeholders. A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. ...

core network protocols including DNS, HTTP, SMB and LDAP, together with operational knowledge of Windows, macOS and Linux. Working knowledge of MITRE ATT&CK and experience applying it during investigations or detection development. Clear written and verbal communication skills, with the ability to provide accurate ...

least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience in managing SOC teams. Relevant certifications (e.g., CISSP ...

application security testing tools • Scripting or automation experience using Python, PowerShell or similar • Understanding of threat intelligence, threat hunting and the MITRE ATT&CK framework • Strong analytical and problem-solving skills, with the ability to work collaboratively across technical teams Apply now for the Cyber ...

both technical and non-technical stakeholders. Desirable Experience Experience working within UK Defence, Government or other highly secure environments. Familiarity with MITRE ATT&CK and threat intelligence frameworks. Experience with enterprise security monitoring platforms and EDR technologies. Knowledge of network security, endpoint monitoring and cloud ...

Deep understanding of AWS & Azure security ideally in a global SaaS context Experience with automation tools (Tines, Shuffler,Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Extensive playbook development and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell ...

within Cyber Security Operations, Threat Intelligence or Incident Response environments. Strong understanding of the Threat Intelligence Lifecycle, Cyber Kill Chain and MITRE ATT&CK Framework. Experience analysing security events, threat intelligence data and cyber threat trends. Strong research, analytical and critical thinking skills. Experience producing ...

/7 operational environment. Professional certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIACySA+ or equivalent. Any knowledge of MITRE ATT&CK or equivalent is desirable. #J-18808-Ljbffr ...

understanding of Microsoft 365 security, endpoint protection, identity and network security. Experience developing SOC processes, procedures and operational improvements. Familiarity with MITRE ATT&CK, threat intelligence and detection engineering. Strong communication skills and a hands-on, collaborative leadership style. Additional experience that would be beneficial ...

respond effectively when threats arise The role offers the opportunity to work with industry‐leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether ...

cyber security. Background working within UK defence or critical national infrastructure. Hands-on experience with cyber threat modelling methodologies, such as MITRE ATT&CK, STRIDE or attack trees. Experience developing operating procedures and governance frameworks. Exposure to threat intelligence platforms or related security tooling. Strong ...

Entra, etc. In depth experience securing a hybrid infrastructure Strong Cloud Experience with either AWS, Azure, or GCP. REQUIRED SKILLS Knowledge MITRE ATT&CK, and Kill Chain Knowledge of IOC extraction, computer forensics, and malware analysis, technologies and methods Expert IPv4 Networking fundamental skills ...

response with the SOC and IT teams, ensuring resilient services for communities. You will work with industry frameworks such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR, collaborating with stakeholders to embed best practices and continuous improvement across security #J-18808-Ljbffr ...