26 to 50 of 75 MITRE ATT&CK Jobs in the UK

responseOwn the SIEM platform, including log source onboarding, the development and tuning of detection use cases and coverage tracking against the MITRE ATT&CK frameworkAct as the internal owner of the managed SOC relationship, including escalation runbooks, service reviews, triage quality and service level agreements ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

understanding of cyber threat detection and incident response methodologies. Knowledge of attacker tactics, techniques, and procedures (TTPs). Familiarity with the MITRE ATT&CK Framework. Experience correlating security telemetry from multiple sources to assess threats and incidents. Strong documentation and reporting skills. Ability to communicate ...

Essential Skills (Both Levels): Practical experience in Threat Hunting, SOC operations, or Cyber Forensics. Strong understanding of adversary TTPs and frameworks (MITRE ATT&CK, Cyber Kill Chain). Familiarity with SIEM platforms and threat intelligence integration. Scripting skills (Python, PowerShell, Regex) for automation. Excellent analytical ...

management experience with meaningful exposure to cyber threat intelligence is preferred Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit or CVE feeds to prioritize vulnerabilities Ability to design and implement mitigation and remediation approaches when ...

possess: Strong experience with Microsoft-centric environments (M365, Azure, Intune, security baselines). Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles. The ability to manage operational workload while progressing ongoing improvement initiatives. Strong communication and stakeholder ...

Trust, identity and access management, Entra ID, Azure and Microsoft 365 security./li li Experience of threat modelling and using MITRE ATT&CK to inform detection and control design./li li Working knowledge of recognised frameworks and guidance, including NCSC CAF, NIST ...

workflows. Cybersecurity Foundation: Working knowledge of security operations, threat lifecycle, alert triage, WAF, API security, and common security frameworks (e.g., MITRE ATT&CK, NIST). AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira ...

retain remediation. Own adversarial AI defence: AI red teaming, prompt and model attack testing, and the mandatory remediation regime that follows, informed by MITRE ATLAS and current research. Translate the EU AI Act, NIST AI RMF and ISO/IEC 42001 into architectural requirements ahead of mandated deadlines … Security, Identity Access Management (IAM), Information Systems, Infrastructure Security, Kubernetes, LangChain (FrameWork), LangGraph, Large Language Models (LLMs), LlamaIndex, Machine Learning Operations, MITRE ATT&CK Framework, MLflow, ML Security, Open Web Application Security Project (OWASP), Operating Systems Security, OWASP Top 10, Python (Programming Language), Scripting, Security ...

threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10/MITRE ATLAS. Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ID sign … differs from on-prem. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

Assist with incident containment, remediation activities, and post-incident analysis. Threat Modelling & Frameworks Apply established threat modelling and intelligence methodologies including: MITRE ATT&CK Cyber Kill Chain Pyramid of Pain Diamond Model Identify intelligence gaps and opportunities to enhance threat detection and response capabilities. Strategic ...

using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability to analyse security telemetry and determine incident severity, scope and impact. Experience documenting investigations, maintaining evidence and communicating findings ...

identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

knowledge of key system artefacts for each Memory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework Understanding of threat actor motivations and methods, and how systems are exploited Excellent communication, from technical practitioners to executive ...

developing investigative toolsets and automation to support and enhance our cyber incident response practicePreferred Qualifications and specialist skills Strong understanding of MITRE ATT&CK techniques/sub-techniques. The ability to articulate TTPs to clients in non-technical terms. Experience in generating SIGMA rules ...

/IEC 42001, the EU AI Act and the OWASP Top 10 for LLM Applications, including where each stops being useful. Familiarity with MITRE ATLAS and published adversarial ML research. Hands-on grounding in LangChain or LlamaIndex, vector databases, production Python and Kubernetes Evaluation and testing … Access Management (IAM), Information Systems, Infrastructure Security, Kubernetes, LangChain (FrameWork), LangGraph, Large Language Models (LLMs), LlamaIndex, Machine Learning Operations, Microsoft Azure, MITRE ATT&CK Framework, MLflow, ML Security, Operating Systems Security, OWASP Top 10, Pinecone (Vector Database) {+ 6 more} Why GSK? Uniting science, technology ...

with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using AI-driven ...