24 of 24 Remote TTP Jobs

practices. Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings to the MITRE ATT&CK framework. Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements. Engage internal … trend analysis, and operational metrics. Support cyber simulations and tabletop exercises to validate response processes and stakeholder readiness. Stay current with emerging threats, attack techniques, vulnerabilities, and industry best practices. Skills and Experience Essential Hands-on experience in Cyber Incident Response, Security Operations (SOC), or Cyber Defence environments. Hands ...

environment. Experience developing, testing, and tuning threat detection use cases. Good understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs). Experience conducting proactive threat hunting and analysing security telemetry. Strong analytical, investigation, and communication skills. Ability to collaborate effectively with SOC analysts ...

analytical products to assist mitigation practices at a tactical and operational level. Analysis of advanced persistent threats including the tactics, techniques, and procedures (TTPs) of attackers. Conduct analysis at a tactical and or operational level, identifying and using appropriate analytical tools and techniques to interpret gaps, patterns and trends, assess ...

happens, and feed what you learn back into the system Harden against new adversary techniques Work with Threat Intelligence to turn new tactics, techniques, and procedures into concrete hardening work and detection coverage Prioritize infrastructure hardening across cloud, identity, and endpoints based on observed attacker behaviour rather than benchmarks alone ...

continue to evolve in line with emerging threats, customer requirements and industry standards. Research and Innovation Conduct research into emerging threat actor tactics, techniques and procedures (TTPs), offensive security tooling and adversary simulation approaches. Apply this knowledge to continuously improve technical capability and bring new ideas into customer engagements. Operational … capability development, service innovation and technical leadership activities. Research and Innovation Time: We encourage continuous learning and provide opportunities to explore new tooling, attacker techniques, research areas and emerging technologies that can be incorporated into customer engagements and future service offerings. Time to Recharge: Enjoy generous leave with the opportunity ...

continue to evolve in line with emerging threats, customer requirements and industry standards. Research and Innovation Conduct research into emerging threat actor tactics, techniques and procedures (TTPs), offensive security tooling and adversary simulation approaches. Apply this knowledge to continuously improve technical capability and bring new ideas into customer engagements. Operational … capability development, service innovation and technical leadership activities. Research and Innovation Time We encourage continuous learning and provide opportunities to explore new tooling, attacker techniques, research areas and emerging technologies that can be incorporated into customer engagements and future service offerings. What you’ll bring We are looking ...

digital forensics Hands-on experience with EDR and SIEM platforms (e.g., Microsoft Defender, Sentinel, CrowdStrike, SentinelOne or similar) Solid understanding of attacker tactics, techniques, and procedures (TTPs) and incident response methodologies Ability to remain composed and methodical in high-pressure situations Strong communication skills with the ability to translate technical ...

working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts and MITRE ATT&CK principles. Practical knowledge of cloud environments and security controls, with the ability to apply detection and ...

confidence scoring, temporal modeling, and graph enrichment capabilities. Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build ...

confidence scoring, temporal modeling, and graph enrichment capabilities. Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build ...

environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding of threat detection lifecycles, attacker behaviours and tactics, techniques and procedures. Proven ability to lead, mentor and develop colleagues while fostering an inclusive, high‐performing team culture. Strong analytical and problem‐solving skills ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

video conference mannerisms and communication skills. Very strong verbal and written English, particularly spelling, grammar, and style. Good understanding of cyber security including TTPs (Tactics, Techniques & Procedures), common tools and industry stakeholders. Formal document and report creation for senior executives and external clients. Experience within high pace, high pressure environments ...

incident response procedures across hybrid IT environments. Some experience of threat hunting methodologies and tools across enterprise environments. A good understanding of common attack techniques, adversary behaviours, and TTPs, including familiarity with frameworks such as MITRE ATT&CK. This position requires travel both UK and international to client locations, approximately ...

handling of blocking issues, and reduction of false positives. Multiple years of experience within the industry Good technical understanding computing protocols, authentication mechanisms & attack TTP’s Intermediate knowledge of Information Security fundamentals, technologies, and design principals. Understanding or demonstrable experience in securing Windows, Linux, Oracle and VM platforms. Excellent verbal ...

leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling and automation using Python Explore Agentic AI workflows and security ...

Detego Global is on the lookout for a SOC Subject Matter Expert to join our Product Management team. We are looking for a mid to senior SOC analyst with extensive operational experience who is ready ...

Location(s):UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so ...

Location(s):UK, Europe & Africa : UK : Manchester BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so ...

Senior Threat Analyst | Manchester/Hybrid | £65,000 Location: Manchester Salary: Circa £65,000, depending on experience Hours: Full-time, Monday-Friday Contract: Permanent Working model: Hybrid, typically one day in the Manchester office every ...

Digital Forensics (DFIR) role Demonstrated experience with Windows, Linux, and MacOS as an attack surface Demonstrated experience with basic Threat Actor tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic … Defense Evasion Techniques, other offensive/Red Team TTPs) Demonstrated experience with static and dynamic malware analysis concepts Working knowledge of Windows Administration or Enterprise Domain Administration Active Directory, Group Policy, Domain Trusts, etc. Working knowledge of core networking concepts Common ports/protocols, NAT, Public/Private IPs, VLANs ...

Careers Tactical Cyber Threat Intelligence Analyst (Analyst II) - Technical focus About us We are SecAlliance, part of CSIS Security Group and the Allurity family of cybersecurity companies Together, we form one of Europe’s most ...

The Incident Responder (IR) is the main person responsible for the technical operational tasks necessary to provide our clients with a high quality, rapid and comprehensive response to a breach. They will be at the ...