7 of 7 YARA Jobs in London

rotation (approximately once every five weeks). Preferred Qualifications, Capabilities, and Skills Experience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent). Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security ...

shift rotation (approximately once every five weeks). Preferred Qualifications, Capabilities, and SkillsExperience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent).Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling. ...

enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules).Deep execution knowledge of generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with tools ...

focused Subject matter expertise in nation-states, advanced persistent threats, and cybercriminal organizations Experience with Splunk Experience with Threat Intelligence Platforms and tools including Yara, STIX/TAXII Experience with command line, packet analysis, network forensics, malware analysis or reverse engineering Experience with MITRE ATT&CK framework and Kill Chain ...

mitigation, quality and accuracy reviews) Production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Experience adhering ...

triage, and campaign attribution analysis. Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries. Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defence teams with intelligence‐driven context and prioritisation. … reverse engineering using tools such as Ghidra, IDA, or x64dbg, or with network flow analysis and host forensics. Experience authoring detection content such as YARA, Sigma, or Suricata rules, or SIEM correlation searches. Experience tracking offensive tooling and C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) across internet‐scan and telemetry ...

Tooling & Analysis: Experience with reverse engineering, analysis techniques, and tools such as Burp Suite Pro, Frida, Objection, JADX, IDA Pro, Hopper, Radare, ADB, Apktool, YARA, Xcode, and Android Studio. Mobile Development & DevSecOps: Knowledge of Android/iOS development, secure development practices, DevSecOps tooling, testing, and automation frameworks. Development & Reverse Engineering ...