3 of 3 MITRE ATT&CK Jobs in the South West

within the team. Demonstrable experience leading cyber security incident response (incident command), from detection through containment and remediation. Working knowledge of MITRE ATT&CK and at least one recognised control framework (ISO 27001, CIS or NIST). Risk-based prioritisation of remediation using threat intelligence. … tooling (e.g. CrowdStrike or equivalent) in a production environment. Prioritised and managed a risk-based security backlog, applying frameworks such as MITRE ATT&CK and threat-based prioritisation. Assured the delivery of security initiatives across distributed teams or sites, tracking vulnerability remediation and patching through ...

Splunk, Sentinel, Elastic) Ability to develop and tune detection rules and alerts Experience with incident response and threat analysis Knowledge of MITRE ATT&CK, IOCs, and TTPs Familiarity with SOAR tools and automation Scripting experience (e.g. Python, PowerShell, Bash) is beneficial Why Apply? Opportunity ...

includes: Microsoft Defender or Microsoft Sentinel. SOC or CIRT environments. Incident response or security monitoring. PowerShell or Python scripting. Knowledge of MITRE ATT&CK or security frameworks. Why apply? Immediate start on a high-profile security programme. Flexible hybrid working. Long-term project with meaningful ...