2 of 2 Permanent MITRE ATT&CK Jobs in Cambridge

improve security telemetry, alert enrichment, investigation workflows and response times. Conduct threat hunting using adversary behaviours, TTPs and frameworks such as MITRE ATT&CK, incorporating findings into security controls and detections. Create and continuously improve incident runbooks, playbooks and detection processes based on findings from … ability to write and develop queries for complex investigations. Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts and MITRE ATT&CK principles. Practical knowledge of cloud environments and security controls, with the ability to apply detection and incident response practices across hybrid ...

will build and optimise detection rules, queries and monitoring logic to strengthen our security posture. The role covers threat hunting using MITRE ATT&CK, creating runbooks and automation to speed investigations, and collaborating with external SOC and internal engineering #J-18808-Ljbffr ...