12 of 12 MITRE ATT&CK Jobs in the South East

rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR … trusted technical consultantLead workshops covering detection engineering, use case design and SOC maturityGuide customers on improving detection coverage and aligning to MITRE ATT&CKClearly explain detection strategies, gaps and recommendations to both technical and non-technical stakeholdersWork closely with platform onboarding and engineering teams to ensure smooth ...

images and security telemetry to establish scope, root cause and attacker activity. Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines … investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST. Good understanding of enterprise networking, IAM, cloud, email and endpoint security. Experience with digital forensics ...

security certifications Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, BloodHound or Cobalt Strike Knowledge of MITRE ATT&CK, NIST CSF, NCSC CAF or ISO 27001 Terraform, Ansible, DevSecOps or CI/CD experience An interest in AI and automation within cyber ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

Assist with incident containment, remediation activities, and post-incident analysis. Threat Modelling & Frameworks Apply established threat modelling and intelligence methodologies including: MITRE ATT&CK Cyber Kill Chain Pyramid of Pain Diamond Model Identify intelligence gaps and opportunities to enhance threat detection and response capabilities. Strategic ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

spanning multiple countries, business units, and cultures. • Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies. • Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations. Data Security ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT or equivalent. ...

Good understanding of SIEM lifecycle management and security telemetry. Knowledge of cloud environments and IT infrastructure. Familiarity with frameworks such as MITRE ATT&CK. Ability to analyse threats and translate them into detection capability. Nice to have: Experience with SOAR (Logic Apps/Splunk SOAR). Detection ...