11 of 11 MITRE ATT&CK Jobs in the South East

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

lessons learned. Experience producing incident records, investigation reports, management updates and post-incident findings. Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

Assist with incident containment, remediation activities, and post-incident analysis. Threat Modelling & Frameworks Apply established threat modelling and intelligence methodologies including: MITRE ATT&CK Cyber Kill Chain Pyramid of Pain Diamond Model Identify intelligence gaps and opportunities to enhance threat detection and response capabilities. Strategic ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

spanning multiple countries, business units, and cultures. • Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies. • Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations. Data Security ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT or equivalent. ...

Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection ...