18 of 18 MITRE ATT&CK Jobs in the South East

delivered in a consistent and scalable way. Working directly with customers, you will define detection strategies, design use cases aligned to MITRE ATT&CK, and guide improvements in visibility, coverage and response maturity. You will work closely with platform onboarding and engineering teams, supplementing them … rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR ...

rulesets across SIEM and XDR platformsDevelop and tune detection logic using KQL or equivalent query languagesDesign detection use cases aligned to MITRE ATT&CK and real-world attack techniquesMap customer log sources to detection use cases to assess coverage and identify gapsDesign and implement SOAR … trusted technical consultantLead workshops covering detection engineering, use case design and SOC maturityGuide customers on improving detection coverage and aligning to MITRE ATT&CKClearly explain detection strategies, gaps and recommendations to both technical and non-technical stakeholdersWork closely with platform onboarding and engineering teams to ensure smooth ...

images and security telemetry to establish scope, root cause and attacker activity. Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines … investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST. Good understanding of enterprise networking, IAM, cloud, email and endpoint security. Experience with digital forensics ...

security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning. About us: A 50-50 joint venture between Tesco … security tooling & solutions e.g. SIEM, SOAR, EDR, vulnerability scanning, threat intelligence platforms. Knowledge of relevantsecurity & AI governanceframeworks and regulations, such as Mitre ATT&CK, NIST, TSA.Any relevant study or certifications, either formal or self-learning. About usA 50-50 joint venture between Tesco and VMO2 ...

Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What … Bring: Proven experience working within a Security Operations Centre. Hands-on experience with Microsoft Sentinel and Splunk. Strong understanding of MITRE ATT&CK. It would be great if you had: Networking protocols and infrastructure (TCP/IP, LAN/WAN, HTTP, SMTP, FTP, LDAP). Firewalls, VPNs ...

identification and response capabilities.- Detect & Defend: Translate cyber threat intelligence into actionable detection use cases, aligned with recognised frameworks such as MITRE ATT&CK.- Consult & Influence: Provide expert technical security consultancy to clients, helping translate complex requirements into effective engineering solutions.- Lead & Deliver: Take ownership of detection … Intelligence: Strong understanding of cyber threat intelligence and its application to detection engineering and security use cases.- Security Frameworks: Knowledge of MITRE ATT&CK and its application to threat detection, coverage analysis and security monitoring.- Agile & Version Control: Experience using agile delivery methodologies ...

optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner for security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing … understanding of Azure, AWS and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber ...

Lead and support incident response activities, providing expert guidance on containment, eradication and recovery. Enhance detection rules and use cases using MITRE ATT&CK and threat-informed defence techniques. Support threat intelligence activities and contribute to the continuous improvement of SOC operations. What … Bring: Proven experience working within a Security Operations Centre. Hands-on experience with Microsoft Sentinel and Splunk. Strong understanding of MITRE ATT&CK. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please ...

security certifications Experience with offensive security tools such as Burp Suite, Nmap, Metasploit, BloodHound or Cobalt Strike Knowledge of MITRE ATT&CK, NIST CSF, NCSC CAF or ISO 27001 Terraform, Ansible, DevSecOps or CI/CD experience An interest in AI and automation within cyber ...

spanning multiple countries, business units, and cultures. Working knowledge of cybersecurity or privacy frameworks, such as NIST, ISO 27001/27701, MITRE ATT&CK, or comparable methodologies. Familiarity with relevant data-protection regulations and requirements, including GDPR and other applicable regional privacy obligations. Core Competencies ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring ...

Assist with incident containment, remediation activities, and post-incident analysis. Threat Modelling & Frameworks Apply established threat modelling and intelligence methodologies including: MITRE ATT&CK Cyber Kill Chain Pyramid of Pain Diamond Model Identify intelligence gaps and opportunities to enhance threat detection and response capabilities. Strategic ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT or equivalent. ...

similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ATT&CK and common attacker techniques. Improving detection rules, investigation playbooks or response workflows. Relevant certifications, such as Microsoft SC-200, CompTIA Security+ ...