1 to 25 of 32 MITRE ATT&CK Jobs in the South East

conditions. Adversary Relevance: Assess the actors, motivations, campaigns, and outcomes most relevant to each customer. Threat Behaviour: Use recognised frameworks, including MITRE ATT&CK, to describe adversary behaviour and identify defensive opportunities. Vulnerability Intelligence: Assess vulnerabilities, exploitation evidence, threat relevance, potential impact, and customer exposure. … assessments and proportionate actions. Identify and analyse relevant threat actors, campaigns, malware, and infrastructure. B. Threat Behaviour and Defensive Relevance Use MITRE ATT&CK to connect actor and campaign activity with techniques, defensive coverage, and hunting opportunities. Maintain structured analysis that supports early warning, prioritisation ...

designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations, and engaging with … customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops ...

security detections, analytics, use cases, investigation methodologies, playbooks, and response procedures, including validating detection coverage against realistic adversary behaviors and the MITRE ATT&CK framework.* Drive automation and orchestration across security operations, using security queries, scripting, and automation to analyze data, accelerate investigations, reduce repetitive … Management, Curiosity, Critical thinking, Problem-solving, Technical Writing, Continuous improvement, Communication, Mentoring/Coaching.* Advanced threat investigation, Threat actor TTP analysis (MITRE ATT&CK), Threat Hunting.**Desirable*** Agentic AI.* Malware analysis.* Digital forensics and evidence preservation.## Rewards & benefitsExplore the rewards and benefits that help ...

suspicious patterns, likely attack paths and Indicators of Compromise (IOCs), improving investigative confidence and speed.• Map observed adversary behaviour to relevant MITRE ATT&CK tactics, techniques and sub-techniques, supporting consistent analysis, clearer communication and visibility of detection coverage.• Create, test and tune threat-hunting … business impact.• Current awareness of malware, ransomware and advanced persistent threat activity affecting cloud and on-premises environments.• Practical knowledge of MITRE ATT&CK and its use in describing tactics, techniques, sub-techniques and observed adversary behaviour.• Experience working within change-controlled environments and following ...

suspicious patterns, likely attack paths and Indicators of Compromise (IOCs), improving investigative confidence and speed. Map observed adversary behaviour to relevant MITRE ATT&CK tactics, techniques and sub-techniques, supporting consistent analysis, clearer communication and visibility of detection coverage. Create, test and tune threat-hunting … business impact. Current awareness of malware, ransomware and advanced persistent threat activity affecting cloud and on-premises environments. Practical knowledge of MITRE ATT&CK and its use in describing tactics, techniques, sub-techniques and observed adversary behaviour. Experience working within change-controlled environments and following ...

Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting queries, map coverage to MITRE ATT&CK, track false‐positive rates, and retire rules that no longer earn their place. Automate response with automation rules and Logic Apps playbooks … rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule mapped to MITRE ATT&CK, and explain why it fires and why it does not. Incident response on a cloud platform: triage, containment, evidence collection ...

regulatory requirements (eg NIS Regulations, DWI). Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, IEC 62443, MITRE ATT&CK). Excellent written and verbal communication, with the ability to simplify complex designs for decision-makers. 3 - Experience with Cyber Security … GDPR, and log retention/data protection compliance requirements. Knowledge of one or more cybersecurity controls standards and frameworks (CIS, NIST, MITRE ATT&CK). Desirable Experience Experience assessing or deploying network access and segmentation controls in OT/ICS or IoT-heavy environments. Experience ...

cloud, identity and vulnerability management. Introduce useful automation, including enrichment, case creation, triage and response playbooks. Use methods such as MITRE ATT&CK and NIST to improve detection and incident readiness. Ensure vulnerabilities and exposures are prioritised, assigned clear risk owners and tracked through treatment … response orchestration. Sound judgement on investigations, evidence handling and risk‐based vulnerability prioritisation, with familiarity with relevant frameworks such as MITRE ATT&CK, NIST, Cyber Essentials and ISO 27001. The ability to lead analysts, make decisions under pressure and explain technical risks clearly to senior ...

identification and response capabilities.- Detect & Defend: Translate cyber threat intelligence into actionable detection use cases, aligned with recognised frameworks such as MITRE ATT&CK.- Consult & Influence: Provide expert technical security consultancy to clients, helping translate complex requirements into effective engineering solutions.- Lead & Deliver: Take ownership of detection … Intelligence: Strong understanding of cyber threat intelligence and its application to detection engineering and security use cases.- Security Frameworks: Knowledge of MITRE ATT&CK and its application to threat detection, coverage analysis and security monitoring.- Agile & Version Control: Experience using agile delivery methodologies ...

core network protocols including DNS, HTTP, SMB and LDAP, together with operational knowledge of Windows, macOS and Linux. Working knowledge of MITRE ATT&CK and experience applying it during investigations or detection development. Clear written and verbal communication skills, with the ability to provide accurate ...

least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience in managing SOC teams. Relevant certifications (e.g., CISSP ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

both technical and non-technical stakeholders. Desirable Experience Experience working within UK Defence, Government or other highly secure environments. Familiarity with MITRE ATT&CK and threat intelligence frameworks. Experience with enterprise security monitoring platforms and EDR technologies. Knowledge of network security, endpoint monitoring and cloud ...

within Cyber Security Operations, Threat Intelligence or Incident Response environments. Strong understanding of the Threat Intelligence Lifecycle, Cyber Kill Chain and MITRE ATT&CK Framework. Experience analysing security events, threat intelligence data and cyber threat trends. Strong research, analytical and critical thinking skills. Experience producing ...

/7 operational environment. Professional certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIACySA+ or equivalent. Any knowledge of MITRE ATT&CK or equivalent is desirable. #J-18808-Ljbffr ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

respond effectively when threats arise The role offers the opportunity to work with industry‐leading frameworks and technologies such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR platforms, while collaborating with stakeholders across the organisation to strengthen our overall security posture. Whether ...

cyber security. Background working within UK defence or critical national infrastructure. Hands-on experience with cyber threat modelling methodologies, such as MITRE ATT&CK, STRIDE or attack trees. Experience developing operating procedures and governance frameworks. Exposure to threat intelligence platforms or related security tooling. Strong ...

Entra, etc. In depth experience securing a hybrid infrastructure Strong Cloud Experience with either AWS, Azure, or GCP. REQUIRED SKILLS Knowledge MITRE ATT&CK, and Kill Chain Knowledge of IOC extraction, computer forensics, and malware analysis, technologies and methods Expert IPv4 Networking fundamental skills ...

response with the SOC and IT teams, ensuring resilient services for communities. You will work with industry frameworks such as NIST, MITRE ATT&CK, SIEM, SOAR and EDR, collaborating with stakeholders to embed best practices and continuous improvement across security #J-18808-Ljbffr ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

developing detections and integrations within SIEM platforms (e.g., Splunk, Elastic, QRadar), use of Risk-based alerting Familiarity with cybersecurity frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF). Experience with cloud security platforms (e.g., Wiz) and integrating their outputs into detection pipelines. Background ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

spanning multiple countries, business units, and cultures. Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies. Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations. Data Security ...