9 of 9 Contract MITRE ATT&CK Jobs in London

reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT&CK framework. SOC Operations Monitor and triage security alerts within Splunk SIEM. Investigate security incidents including phishing attacks, credential abuse, malicious process … Strong communication and stakeholder engagement skills. Desirable Skills Experience with Cribl. Knowledge of OCSF schemas and security data normalisation. Familiarity with MITRE ATT&CK and NICE Cybersecurity Frameworks. Experience with Sigma, YARA, or IDS signature development. Exposure to Splunk SOAR, Cortex XSOAR, or other automation ...

findings to both technical and non-technical stakeholders. A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

understanding of cyber threat detection and incident response methodologies. Knowledge of attacker tactics, techniques, and procedures (TTPs). Familiarity with the MITRE ATT&CK Framework. Experience correlating security telemetry from multiple sources to assess threats and incidents. Strong documentation and reporting skills. Ability to communicate ...

using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability to analyse security telemetry and determine incident severity, scope and impact. Experience documenting investigations, maintaining evidence and communicating findings ...

identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge ...

with SIEM/XDR platforms and KQL, SPL, or LogScale Microsoft 365 security experience Threat hunting and detection engineering aligned to MITRE ATT&CK Python and/or PowerShell scripting EDR experience across Windows and macOS environments Security automation and orchestration Experience using AI-driven ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

securing applications across their lifecycle. Solid understanding of data protection and relevant controls. Hands-on experience with threat modelling using STRIDE, MITRE ATT&CK, and attack trees. Interested? Apply now for immediate consideration ...