1 to 25 of 26 Tradecraft Jobs in England

leading to high-value targets Conducting engagement activities in line with operational security best practice and within a range of threat actor capabilities and tradecraft Deep understanding of security technologies found in end-user and server operating systems and supporting infrastructure, including relevant architectural and operational patterns of at-scale ...

detection engineering and threat hunting at scaleDetection-as-code, CI/CD of detection content, and security content managementStrong knowledge of adversary tradecraft and frameworks:MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chainExperience leveraging Agentic AI, Microsoft Security Copilot, or AI/ML in security operations ...

detection engineering and threat hunting at scale Detection-as-code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft and frameworks: MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ ...

detection engineering and threat hunting at scale Detection-as-code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft and frameworks: MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ ...

tabletop simulations Stay current with emerging threats and TTPs relevant to client environments Additional Responsibilities (Client Dependent): Proactive threat hunting and development of tradecraft Incident response and playbook creation Collection and interpretation of threat intelligence and emerging attacker TTPs Vulnerability scanning, reporting, and management Leadership opportunities in client environments, including ...

cloud platforms, where in scopeBuild, adapt, and operate red team infrastructure, command-and-control tooling, payloads, and scripts during authorised client engagementsApply detection-aware tradecraft and understand how EDR, SIEM, identity protection, conditional access, email security, and network monitoring can affect red team operationsSupport purple team engagements by executing agreed … social engineering activity, including reconnaissance, phishing, vishing, pretext development, and controlled initial access scenariosConduct research and development to improve Kroll’s red team tooling, tradecraft, methodology, and reportingProduce clear, evidence-based reporting that explains attack paths, business impact, detection and response observations, and prioritised remediation actionsPresent technical findings to security ...

data, OSINT, vendor intelligence, dark web research, internal telemetry, and partner reporting into clear, actionable intelligence. Conduct technical research on malicious infrastructure, tooling, and tradecraft used by threat actors, including infrastructure pivoting, malware and phishing kit triage, and campaign attribution analysis. Surface detection opportunities from technical research and partner with … Brief technical, business, and senior leadership stakeholders on cyber threats, trends, potential business impact, and recommended actions. Mentor and guide other analysts through influence, tradecraft coaching, intelligence writing, and analytical review. Help mature CTI processes, tools, reporting standards, and intelligence outputs while remaining closely engaged in hands‐on analysis. Support ...

detection capability into Cyber Security ownershipWhat we’re looking forProven experience in detection engineering, threat hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python ...

next challenge, you'll have the opportunity to develop skills across multiple cyber disciplines. You might find yourself analysing data, building software, developing investigative tradecraft, researching adversary behaviour, automating workflows, or creating new capabilities that help protect the UK's most critical organisations. Unlike many cyber roles that focus ...

next challenge, you'll have the opportunity to develop skills across multiple cyber disciplines. You might find yourself analysing data, building software, developing investigative tradecraft, researching adversary behaviour, automating workflows, or creating new capabilities that help protect the UK's most critical organisations. Unlike many cyber roles that focus ...

next challenge, you'll have the opportunity to develop skills across multiple cyber disciplines. You might find yourself analysing data, building software, developing investigative tradecraft, researching adversary behaviour, automating workflows, or creating new capabilities that help protect the UK's most critical organisations. Unlike many cyber roles that focus ...

operations, ensuring they are well scoped, professionally executed and deliver value to the businessProviding technical leadership throughout operations, maintaining high standards of tradecraft, operational security and decision-makingCollaborating with teams across the organisation to maximise operational outcomes and organisational learningManaging, coaching and developing team members, fostering a culture of technical ...

cyber threat actors, APT groups, and cybercrime campaigns.Experience producing threat intelligence reports, assessments, and executive briefings relevant to Public Sector targetsStrong understanding of intelligence tradecraft, including source evaluation and analytical methodologies.Knowledge of Public Sector cybersecurity frameworks and regulations, such as NIST CSF, CMMC, FedRAMP, EO 14028 and CISA directives.Excellent written ...

infrastructure, ideally AWSStrong networking knowledge: can read a PCAP, spot beaconing in flow logs, and reason about lateral movement across VLANs and firewallsKnows attacker tradecraft (initial access, persistence, privilege escalation, exfiltration) and can map an investigation to itComfortable scripting in Python or similar to automate enrichment, triage and responseStrong ownership ...

collect, extract and analyse information from blockchain, prediction market and other online platforms. Proficient and demonstrable expertise in OSINT, CYBINT/DNINT or intelligence tradecraft methodologies. Strong analytical, critical thinking and problem-solving skills. Strong written and verbal communication skills, with the ability to produce clear, concise reports and present ...

their professional development, it is beneficial to have a data scientist that will take the initiative and attend training which will improve their tradecraft, techniques, and investigative methodsYou have a strong foundation in data science, analytics, or machine learning, with hands-on experience developing models that solve practical problems ...

their professional development, it is beneficial to have a data scientist that will take the initiative and attend training which will improve their tradecraft, techniques, and investigative methods You have a strong foundation in data science, analytics, or machine learning, with hands-on experience developing models that solve practical problems ...

decision makers for the whole public sector.- Facilitate government-to-government and private-sector-to-government conversations, including cross-border engagement, that surface tradecraft and technical expertise in a way that is organic for the customer.- Build and own a portfolio of strategic relationships, honestly grading the health and momentum ...

The Principal Microsoft Defender XDR, IRM & Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft ...

driven use cases, and providing intelligence that AI-enabled capabilities and agents can easily consume. Furthermore, you'll aid the continuous improvement of CTI tradecraft, intelligence methods, and team capacity as part of the overall CTI transformation plan.What we're looking forEssentialExtensive Cyber Threat Intelligence background, including threat actor analysis … campaign analysis, and intelligence lifecycle oversight (typically 5+ years).Strong understanding of intelligence tradecraft, structured analytic techniques, and intelligence led decision making.Experience using and developing TIPs or intelligence management systems.Experience applying automation, scripting, APIs, or workflow optimisation to improve intelligence processes.Experience using AI, large language models, or AI-assisted workflows ...

driven use cases, and providing intelligence that AI-enabled capabilities and agents can easily consume. Furthermore, you'll aid the continuous improvement of CTI tradecraft, intelligence methods, and team capacity as part of the overall CTI transformation plan.What we're looking forEssentialExtensive Cyber Threat Intelligence background, including threat actor analysis … campaign analysis, and intelligence lifecycle oversight (typically 5+ years).Strong understanding of intelligence tradecraft, structured analytic techniques, and intelligence led decision making.Experience using and developing TIPs or intelligence management systems.Experience applying automation, scripting, APIs, or workflow optimisation to improve intelligence processes.Experience using AI, large language models, or AI-assisted workflows ...

reliable and trustworthy partner in their journey to enhance security posture and resilience. Continuous Improvement Stay abreast of the latest cyber security trends, attacker tradecraft, and best practices, continuously enhancing your skills and knowledge to better serve our customers. Required Experience & Skills Minimum 3 years of cyber security experience, with … security products and technologies, with proficiency in Azure, Microsoft Sentinel, KQL, and the Microsoft Defender suite or related product lines. Deep understanding of attacker tradecraft and security hardening techniques, enabling you to offer valuable insights and recommendations to clients. Fluent in English. Nice to Have Scripting/programming skills ...

End DateSaturday 12 September 2026Salary Range92,701 - 109,060We support flexible working – click here for more information on flexible working optionsFlexible Working OptionsHybrid Working, Job ShareJob Description SummaryABOUT THIS OPPORTUNITYThis is a pivotal moment to ...

End DateSaturday 12 September 2026Salary Range92,701 - 109,060We support flexible working – click here for more information on flexible working optionsFlexible Working OptionsHybrid Working, Job ShareJob Description SummaryABOUT THIS OPPORTUNITYThis is a pivotal moment to ...

End DateSaturday 12 September 2026Salary Range92,701 - 109,060We support flexible working – click here for more information on flexible working optionsFlexible Working OptionsHybrid Working, Job ShareJob Description SummaryABOUT THIS OPPORTUNITYThis is a pivotal moment to ...