12 of 12 Contract MITRE ATT&CK Jobs in the UK

images and security telemetry to establish scope, root cause and attacker activity. Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATT&CK where appropriate. Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements. Maintain incident records, investigation timelines … investigating Windows and Linux systems, authentication activity, security logs and network traffic. Strong understanding of the incident response lifecycle. Knowledge of MITRE ATT&CK, Cyber Kill Chain and NIST. Good understanding of enterprise networking, IAM, cloud, email and endpoint security. Experience with digital forensics ...

SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases. Develop behavioural … Experience Strong hands-on experience in SOC Detection Engineering, including detection rule development, validation, tuning and lifecycle management. Excellent knowledge of MITRE ATT&CK, attacker TTPs, behavioural analytics and threat-led detection methodologies. Experience translating cyber threat intelligence, threat modelling and threat hunting findings into ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction … sources; implement incremental loading, event-time handling, reconciliation, and recovery patterns. Engineer mappings between enterprise security data and standards such as MITRE ATT&CK and STIX while managing versioning, extensions, and organization-specific concepts. Design query patterns, graph projections, indexes, constraints, partitioning strategies, retention policies ...

network traffic analysis. Understanding of the incident response lifecycle, including detection, analysis, containment, eradication and recovery. Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain and NIST. Understanding of enterprise networking, identity and access management, cloud security and email security technologies. Excellent communication ...

environment. Excellent analytical and problem-solving skills. Desirable Skills Security Operations Centre (SOC) experience. Experience with Microsoft Defender XDR. Knowledge of MITRE ATT&CK framework. Experience with Azure security services. Experience building Sentinel workbooks and dashboards. Logic Apps and SOAR automation experience. Threat Intelligence integration ...

such as CrowdStrike , Microsoft Defender , or similar platforms. Proven experience investigating and responding to cyber security incidents. Good understanding of the MITRE ATT&CK framework and contemporary cyber threat landscapes. Experience managing security incidents within a corporate or enterprise environment. Strong analytical, problem-solving ...

during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

professional with cyber security or information security experience Technical expertise with threat modelling using STRIDE, PASTA, attack trees, tooling and MITRE ATT&CK. Cyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation. Development and DevOps knowledge, including CI/CD, pipelines ...

environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security incidents and threats. For Tier 3, the ability to lead complex investigations and provide technical direction ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...