5 of 5 Contract MITRE ATT&CK Jobs in London

team. Key Responsibilities Conduct Threat Modelling using established and documented methodologies. Apply techniques including STRIDE, PASTA, Attack Trees and MITRE ATT&CK to identify and assess threats. Identify vulnerabilities using frameworks such as CWE and OWASP . Define, document and maintain appropriate security controls … Security . Strong experience in several of the following is required: Threat Modelling - essential , including STRIDE, PASTA, Attack Trees, tooling and MITRE ATT&CK. Professional experience working within a Cyber Security/Information Security role - essential . Identifying vulnerabilities using CWE and OWASP . Security principles covering ...

Experience & Skills Core Detection & Threat Analysis Experienced building detection rules (SIEM, EDR, or cloud-native tooling) Deep understanding of attack patterns (MITRE ATT&CK framework) SOC operations, threat analysis, or incident response Datadog & Cloud Monitoring Hands-on Datadog OR equivalent Sentinel/SIEM experience Azure ...

Elastic certifications or relevant cybersecurity qualifications. Experience with Elastic Agent, Fleet, Beats and endpoint integrations. Knowledge of security frameworks such as MITRE ATT&CK. Experience developing threat-detection use cases and tuning SIEM alerts. Familiarity with cloud platforms such as AWS, Azure or Google Cloud. Experience working ...

monitoring. Strong understanding of cyber attack techniques, Indicators of Compromise (IOCs), and the incident response lifecycle. Familiarity with frameworks such as MITRE ATT&CK. Experience supporting containment and remediation activities during active security incidents. Excellent analytical and problem solving capabilities. Strong communication skills with the ability ...

professional with cyber security or information security experience Technical expertise with threat modelling using STRIDE, PASTA, attack trees, tooling and MITRE ATT&CK. Cyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation. Development and DevOps knowledge, including CI/CD, pipelines ...