12 of 12 MITRE ATT&CK Jobs in the South East

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

architectures, key components, and common IT/OT protocols. Certifications - Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ - MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP). Standards, frameworks, and regulatory experience including … Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity ...

Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What … Bring: Proven experience working within a Security Operations Centre. Hands-on experience with Microsoft Sentinel and Splunk. Strong understanding of MITRE ATT&CK. It would be great if you had: Networking protocols and infrastructure (TCP/IP, LAN/WAN, HTTP, SMTP, FTP, LDAP). Firewalls, VPNs ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring ...

Advanced KQL; PowerShell and/or Python automation. · Entra ID, Conditional Access, Intune and Microsoft 365 security. · Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. · CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

Rust, Ada, Java).? Desirable Experience working within Defence, MOD or other high-assurance environments. Understanding of frameworks such as MITRE ATT&CK, CAF or NIST. Experience designing or maintaining infrastructure used to support offensive security operations. Experience developing tools, automation or bespoke offensive security ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT or equivalent. ...

similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ATT&CK and common attacker techniques. Improving detection rules, investigation playbooks or response workflows. Relevant certifications, such as Microsoft SC-200, CompTIA Security+ ...