7 of 7 TTP Jobs in Central London

practices. Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings to the MITRE ATT&CK framework. Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements. Engage internal … trend analysis, and operational metrics. Support cyber simulations and tabletop exercises to validate response processes and stakeholder readiness. Stay current with emerging threats, attack techniques, vulnerabilities, and industry best practices. Skills and Experience Essential Hands-on experience in Cyber Incident Response, Security Operations (SOC), or Cyber Defence environments. Hands ...

and Expertise Essential: Demonstrable experience delivering high-complexity Red Team engagements end-to-end. Deep understanding of the adversary lifecycle and common tactics, techniques, and procedures (TTPs). Familiarity with evasion techniques and bypassing controls such as EDR/EPP, email/web gateways, proxies, etc. Experience in stakeholder engagement ...

Lead forensic investigations across host, network and cloud environments to identify root cause, scope and impact of cyber incidents. Analyse threat actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect … network and application forensics. Experience investigating complex cyber incidents from initial response through to reporting and remediation. Strong understanding of threat actor tactics, techniques and procedures (TTPs). Hands‐on experience with forensic and incident response tooling. Familiarity with malware investigation and compromised system analysis. Knowledge of enterprise infrastructure, including ...

threat intelligence, incident response, cloud security, adversary simulation, offensive security, mobile/platform security, digital forensics, trust and safetyDeep expertise in attacker tactics, techniques, and procedures with demonstrated ability to advance the state of the artProficiency in coding with experience in languages such as Python or RustTrack record of architecting ...

Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with … building these systems to harden them Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team What ...

experience in one or more domains: detection engineering, threat intelligence, incident response, cloud security, adversary simulation, offensive security, or digital forensicsExtensive knowledge of attacker tactics, techniques, and proceduresProficiency in coding with experience in languages such as Python, Go, C/C++, or shell scriptingExperience building security systems, tools, or capabilities ...

Experience Senior-to-mid level experience in cyber intelligence analysis required (3 - 5 years' work experience) Deep knowledge of analytical tradecraft, intelligence analysis, writing techniques and methodologies, critical thinking skills, and open source intelligence gathering techniques Strong interpersonal skills and team focused Subject matter expertise in nation-states, advanced persistent ...