6 of 6 Contract MITRE ATT&CK Jobs in the UK excluding London

SIEM administration or platform support. Key Responsibilities Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models. Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases. Develop behavioural … Experience Strong hands-on experience in SOC Detection Engineering, including detection rule development, validation, tuning and lifecycle management. Excellent knowledge of MITRE ATT&CK, attacker TTPs, behavioural analytics and threat-led detection methodologies. Experience translating cyber threat intelligence, threat modelling and threat hunting findings into ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction … sources; implement incremental loading, event-time handling, reconciliation, and recovery patterns. Engineer mappings between enterprise security data and standards such as MITRE ATT&CK and STIX while managing versioning, extensions, and organization-specific concepts. Design query patterns, graph projections, indexes, constraints, partitioning strategies, retention policies ...

during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

environment. Strong SIEM and security event investigation experience. Experience with EDR/XDR technologies. Good understanding of cyber attack techniques and MITRE ATT&CK. Experience investigating common security incidents and threats. For Tier 3, the ability to lead complex investigations and provide technical direction ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...