1 to 25 of 29 Permanent MITRE ATT&CK Jobs in the North of England

particular attention to threats targeting privileged access tooling and supply chain attack vectors. Help maintain and evolve detection coverage mapped to MITRE ATT&CK. Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts. AI Integration & Automation Use AI-driven tools for alert triage … Bring 4+ years of experience in a SOC, security operations, or incident response role. Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior. Experience with at least one SIEM platform and familiarity with writing search or detection queries. Familiarity with ...

intelligence and security monitoring tools Knowledge of cloud security technologies, particularly Microsoft and Azure environments Familiarity with security frameworks such as MITRE ATT&CK Strong analytical and problem‐solving skills Excellent communication and stakeholder management abilities Experience coaching, mentoring or providing technical leadership to other ...

security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines Understanding ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

national coordination activities where incidents have cross-force or sector-wide implications. Apply threat intelligence, attacker TTPs and frameworks such as MITRE ATT&CK to support investigations and response activities. Identify trends, lessons learned and opportunities to improve cyber resilience across UK policing. Contribute ...

Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding of the MITRE ATT&CK framework. Previous experience within an MSP, MSSP or Security Operations Centre. Relevant Cyber Security certifications, such as Microsoft ...

SentinelOne, Defender, Check Point). Exposure to Cloud Security Posture Management (CSPM) and platforms such as Wiz. Understanding of SOC workflows, MITRE ATT&CK framework, and threat intelligence integration. History Cyber Security Specialists, SEP2 is an organisation providing advanced cyber security services solutions and tech ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG : LLM-based extraction ...

breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and SaaS ...

following would be advantageous: Relevant industry qualifications or certifications such as CPTIA, CRTIA or SANS FOR578 . Familiarity with frameworks including MITRE ATT&CK and/or the Cyber Kill Chain . Experience with technologies such as CrowdStrike, Microsoft security products and Orpheus . ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

identity systems, or cloud environments Foundational understanding of common attacker tactics, techniques, and procedures (TTPs), with familiarity of frameworks such as MITRE ATT&CK Analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly Effective communication skills, including ...

documentation skills. Demonstrable experience delivering secure architectural solutions within large or complex organisations. Desirable Experience Knowledge of frameworks such as NIST, MITRE ATT&CK and ISO 27001. Team leadership, coaching or management experience. Relevant certifications such as CISSP, CISM or equivalent. What's on Offer ...

managing operational security in an Azure/365-centric environment Experience in analysis of cyber attacks using methodologies such as MITRE ATT&CK and other relevant frameworks Demonstrable ability to keep updated on the subject matter as part of an ever-changing threat landscape Bachelors ...

analysis using EDR telemetry and SIEM platforms. Strong knowledge of Windows internals, OS artefacts, attacker tradecraft and frameworks such as MITRE ATT&CK is expected. Experience with forensic best-practice evidence handling and incident response lifecycle methodologies is essential.### Who It SuitsThis role suits ...

Kubernetes, and secure software development across Azure and/or AWS Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes Experience working across enterprise and solution architecture, with strong ...

tooling such as Velociraptor, KAPE, Autopsy, Volatility or equivalent. Malware analysis, reverse engineering or network forensics. Threat intelligence, threat hunting and MITRE ATT&CK. Experience supporting ransomware investigations and complex security incidents. Designing and facilitating cyber incident tabletop exercises. Developing realistic incident scenarios, injects and exercise objectives. ...

priorities. Strong analytical and problem-solving skills. Knowledge of cyber threat intelligence concepts, threat actor behaviours, and attack frameworks such as MITRE ATT&CK. Understanding of Microsoft 365, Azure, AWS, cloud environments, and associated cyber security risks. #J-18808-Ljbffr ...

down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high-fidelity. Validation: test new/updated rules via replay and load ...

improve the Security Operations processes. What we’re looking for Management level knowledge of Security Operations processes and techniques such as Incident response, MITRE ATTACK, Vulnerability Management, SIEM Demonstrable experience implementing and operating processes to deliver IT Risk Management in the context of remediation and operations activities. Able ...