51 to 75 of 253 MITRE ATT&CK Jobs in the UK

monitoring capabilities. Reduce false positives and improve detection coverage using threat intelligence and incident learnings. Investigate threats using frameworks such as MITRE ATT&CK. Work closely with internal IT, engineering and security teams, alongside external security providers. Maintain and improve security playbooks, procedures, documentation and response processes. … environments . Knowledge of Windows environments, with working knowledge of Linux/Unix. Understanding of threat intelligence, IOCs, TTPs and the MITRE ATT&CK framework . Experience improving detection logic, alert quality and security controls. Strong stakeholder communication and incident management skills. Knowledge of frameworks ...

standard — author, tune, and peer‐review detections in KQL, SPL, EQL, or Sigma; manage the false‐positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune detections themselves. Own the threat‐landscape narrative for your engagement — turn intelligence from … similar environment— including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application‐level telemetry from cloud‐hosted services (AWS is a strong preference at this grade ...

team. Key Responsibilities Conduct Threat Modelling using established and documented methodologies. Apply techniques including STRIDE, PASTA, Attack Trees and MITRE ATT&CK to identify and assess threats. Identify vulnerabilities using frameworks such as CWE and OWASP . Define, document and maintain appropriate security controls … Security . Strong experience in several of the following is required: Threat Modelling – essential , including STRIDE, PASTA, Attack Trees, tooling and MITRE ATT&CK. Professional experience working within a Cyber Security/Information Security role – essential . Identifying vulnerabilities using CWE and OWASP . Security principles covering ...

team. Key Responsibilities Conduct Threat Modelling using established and documented methodologies. Apply techniques including STRIDE, PASTA, Attack Trees and MITRE ATT&CK to identify and assess threats. Identify vulnerabilities using frameworks such as CWE and OWASP . Define, document and maintain appropriate security controls … Security . Strong experience in several of the following is required: Threat Modelling - essential , including STRIDE, PASTA, Attack Trees, tooling and MITRE ATT&CK. Professional experience working within a Cyber Security/Information Security role - essential . Identifying vulnerabilities using CWE and OWASP . Security principles covering ...

decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary: £50,000 – £70,000 (dependent on experience … writing and board‐level presentation capability. Experience leading client engagements and managing stakeholders. Ideally big 4 experience Technical Expertise Familiarity with MITRE ATT&CK and FAIR methodologies. Qualifications MSc in Cyber Security (or equivalent) CEH, CompTIA Security+ (required or equivalent experience) CE Advisor or prepared ...

program and own the intelligence-to-defense loop: convert prioritized adversary intelligence into detection requirements, control coverage decisions, and changes to the defensive architecture.Govern ATT&CK-aligned detection coverage on measured efficacy, and stand up continuous validation through adversary emulation and detection testing to prove that intelligence … decision quality to perform under pressure.Strong command of threat-informed defense: translating intelligence into detection coverage and architecture decisions, anchored in MITRE ATT&CK, with kill chain analysis as a supporting lens for mapping attacker progression.Working command of detection engineering practice: detection-as-code, content ...

SentinelOne, CrowdStrike or similar tools. A good understanding of common cyber threats, attack techniques and detection methodologies, including familiarity with the MITRE ATT&CK framework. Working knowledge of Windows and Linux operating systems, networking fundamentals and identity management technologies. Experience supporting or securing cloud environments ...

response, or threat intelligence.Attacker Knowledge: Practical experience analysing attacker behavior, with a strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls.SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule ...

driving operational standards.Excellent documentation, analytical, and stakeholder management skills.DesirableCertifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent.Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles.Experience with PowerShell, Python, or security automation technologies.Experience contributing to cyber service development, tooling ...

documentation, analytical, and stakeholder management skills. Desirable Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent. Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles. Experience with PowerShell, Python, or security automation technologies. Experience contributing to cyber service ...

Threat Modelling exercises and risk assessments.Knowledge of threat actor tactics, techniques, and procedures (TTPs).Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain.Experience investigating security events and supporting incident response activities.Strong analytical, investigative, and problem-solving skills.Ability to assess cyber ...

Modelling exercises and risk assessments. Knowledge of threat actor tactics, techniques, and procedures (TTPs).Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Experience investigating security events and supporting incident response activities. Strong analytical, investigative, and problem-solving skills. Ability ...

Azure Sentinel, Splunk, or Sophos Taegis. Familiarity with EDR tools including SentinelOne or CrowdStrike. A strong understanding of common attack techniques (MITRE ATT&CK). Working knowledge of Windows, Linux, identity systems, and networking. Experience working with cloud platforms (OCI preferred) in a security context. ...

Teaming, Continuous Adversarial Testing and Vulnerability Disclosure Programmes.Understanding of Cyber Threat Intelligence, phishing, social engineering and insider risk management.Good understanding of MITRE ATT&CK and NIST Cybersecurity Frameworks.Strong analytical and problem-solving skills, with the ability to investigate technical security issues and recommend appropriate actions.Ability ...

threat intelligence. Attacker Knowledge: Practical experience analysing attacker behavior, with a strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands-on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule ...

threat intelligence Attacker Knowledge: Practical experience analysing attacker behaviour, with a strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls SIEM Expertise: Hands‐on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule ...

security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint, identity and network security incidents Familiarity with Windows, Linux, Active Directory ...

threat intelligence. Attacker Knowledge: Practical experience analysing attacker behaviour, with a strong understanding and application of threat analysis models like MITRE ATT&CK to prioritize and enhance detective controls. SIEM Expertise: Hands‐on experience with SIEM platforms (e.g., Splunk, Google SecOps, Elastic, Sentinel) for rule ...

perimeter controls and operating systems Understanding of cloud security controls and container security Experience with EDR tooling and familiarity with the MITRE ATT&CK framework Experience with scripting or basic coding for automation Experience conducting investigations including eDiscovery Industry recognised security certifications such as CISSP ...

compliance frameworks: NIST CSF, SOC 2, ISO 27001, DORA, HIPAA, or FedRAMP Familiarity with threat intelligence operationalization (CrowdStrike CAO/Intel, MITRE ATT&CK, adversary tracking) What’s in it for youAt Accenture in addition to a competitive basic salary, you will also have ...

compliance frameworks: NIST CSF, SOC 2, ISO 27001, DORA, HIPAA, or FedRAMP Familiarity with threat intelligence operationalization (CrowdStrike CAO/Intel, MITRE ATT&CK, adversary tracking) What’s in it for youAt Accenture in addition to a competitive basic salary, you will also have ...

GCIH, GCIA, GNFA, CISSP, CISM, or equivalent experience in incident response and security operations.Experience with threat hunting, purple teaming, and using MITRE ATT&CK to structure detections, gaps analysis, and defensive improvements.Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender, Sentinel ...

GCIA, GNFA, CISSP, CISM, or equivalent experience in incident response and security operations. Experience with threat hunting, purple teaming, and using MITRE ATT&CK to structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender ...

GCIA, GNFA, CISSP, CISM, or equivalent experience in incident response and security operations. Experience with threat hunting, purple teaming, and using MITRE ATT&CK to structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender ...

Understanding of network protocols, attack techniques, and cyber threat methodologies Experience investigating security incidents across Windows and Linux environments Knowledge of MITRE ATT&CK framework Familiarity with endpoint detection and response platforms We're hiring across multiple Cyber Security disciplines, if you are a specialist ...