26 to 50 of 62 MITRE ATT&CK Jobs in the UK excluding London

Splunk SIEM, to enable the detection of threats across diverse platforms (e.g. cloud, endpoints, and networks)· Use frameworks like MITRE ATT&CK to map detection rules and maximise threat coverage· Use analytical platforms to query high volume datasets to identify trends and spot unusual behaviours ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

technologies, including IDS/IPS, EDR, ATP, malware protection, and monitoring platforms. Experience with threat hunting methodologies and familiarity with the MITRE ATT&CK framework preferred. Working knowledge of incident response processes, adversary tactics and techniques, and cyber threat intelligence. Strong technical expertise in Windows ...

knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference architectures, repeatable deployment patterns ...

Operations’ function.• Define and maintain the RESPOND capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection ...

Cyber security regulations and industry framework eg GDPR, Network and Information Systems (NIS) regulations, NCSC; Knowledge of ITIL; Knowledge of Mitre ATT&CK etc; Threat monitoring and intelligence gathering and assessment; processes to scan for vulnerabilities and implementing fixes and mitigations; Incident response management Essential ...

implementing enterprise-scale security automation and orchestration. Strong understanding of Security Operations and Incident Response. Deep knowledge of security frameworks including: MITRE ATT&CK NIST Cybersecurity Framework Experience with Windows, Linux/UNIX and database technologies. Strong scripting and automation skills, ideally with Python, alongside ...

sector, geography, adversary groups). Run threat‐hunting campaigns using GTI, Mandiant frontline intelligence, and UDM search. Validate detection coverage against MITRE ATT&CK using Mandiant Security Validation where in scope. Practice growth Mentor engineers and consultants; lead internal SecOps and GUS enablement. Represent … SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma, MITRE, public rule repos). Benefits We believe in supporting our team members both professionally and personally. Here's how we invest in you: Compensation ...

vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. Build and maintain security tooling and automation from policy-as-code ...

point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation alone. Communicate security findings ...

deep understanding of attacker tactics and techniques, experience working with SIEM and SOAR technologies, and a strong knowledge of the MITRE ATT&CK framework across both Enterprise and ICS environments. Exposure to OT/ICS security and standards such as IEC 62443 would be highly ...

concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know ...

monitoring, intrusion detection, network monitoring, and OT security platforms such as Dragos or equivalent.Understanding of cyber threat frameworks and methodologies, including MITRE ATT&CK for ICS and industrial communication protocols.Ability to work independently, lead complex technical activities, manage ambiguity, and influence stakeholders across operational, engineering ...

automation skills (Python, Bash or similar). Experience configuring SIEM platforms. Understanding of security frameworks and threat frameworks such as MITRE ATT&CK . Desirable Experience with Microsoft Defender. Experience with additional SIEM or observability platforms. DevSecOps and CI/CD pipeline security experience. Security ...

trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Collaborated with infrastructure, cloud ...

pairing practices that spread security knowledge across the team. Tooling and practice familiarity Familiarity with structured threat modelling approaches — STRIDE, MITRE ATT&CK, attack trees — and experience embedding these into agile delivery ceremonies. Experience integrating SAST, SCA, dependency scanning, and container security tooling into ...

pairing practices that spread security knowledge across the team Tooling and practice familiarity Familiarity with structured threat modelling approaches - STRIDE, MITRE ATT&CK, attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into ...

CrowdStrike and Darktrace Design, create and optimise detection rules to improve alert quality and reduce false positives Increase detection coverage through MITRE ATT&CK mapping and continuous engineering improvements Review platform health, telemetry and security tooling integrations Assess investigations completed by the outsourced security provider ...

Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security ...

solutions across IaaS, PaaS and SaaS. Knowledge of Azure, AWS or Google Cloud security services. Experience with threat modelling methodologies (STRIDE, MITRE ATT&CK etc.). Understanding of IAM, encryption, networking and cloud-native security controls. Knowledge of CIS, NIST, ISO27001 and security architecture frameworks. ...

/CD principles within secure environments Strong written reporting and technical documentation skills Understanding of threat frameworks such as MITRE ATT&CK Desirable criteria Experience working within Defence, National Security or protectively marked environments Experience with Active Directory, Windows Services, Scheduled Tasks and IIS SIEM ...

modeling capabilities.What We ValueThese skills will help you succeed in this role:Deep expertise in threat modeling methodologies such as STRIDE, MITRE ATT&CK, Kill Chain, attack trees, and risk-based security analysis.Strong application security and cloud security experience, including modern cloud-native architectures, APIs ...

Recorded Future or similar skills Experience analysing threat actors, campaigns, and emerging cyber threats. Strong stakeholder engagement and communication skills. Desirable MITRE ATT&CK Threat Hunting OSINT STIX/TAXII MISP Intelligence Reporting Threat Actor Profiling - Give me 5 keywords from this to add into ...

Months £110k plus bens - UK REMOTE Senior SOAR Engineer Splunk SOAR Splunk Enterprise Security Cyber Security Security Automation Python MITRE ATT&CK NIST An opportunity has arisen for an experienced Senior SOAR Engineer to join a high-performing Cyber Security Engineering team responsible for designing ...

landscape by drawing on credible, up-to-date threat information. Contribute to threat modelling using recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST ...