24 of 24 Permanent TTP Jobs in London

development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial. Relevant security certifications (e.g. GCLD … development practices. Familiarity with security tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs). Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial. Relevant security certifications (e.g. GCLD ...

practices. Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings to the MITRE ATT&CK framework. Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements. Engage internal … trend analysis, and operational metrics. Support cyber simulations and tabletop exercises to validate response processes and stakeholder readiness. Stay current with emerging threats, attack techniques, vulnerabilities, and industry best practices. Skills and Experience Essential Hands-on experience in Cyber Incident Response, Security Operations (SOC), or Cyber Defence environments. Hands ...

environment. Experience developing, testing, and tuning threat detection use cases. Good understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs). Experience conducting proactive threat hunting and analysing security telemetry. Strong analytical, investigation, and communication skills. Ability to collaborate effectively with SOC analysts ...

happens, and feed what you learn back into the system Harden against new adversary techniques Work with Threat Intelligence to turn new tactics, techniques, and procedures into concrete hardening work and detection coverage Prioritize infrastructure hardening across cloud, identity, and endpoints based on observed attacker behaviour rather than benchmarks alone ...

and Expertise Essential: Demonstrable experience delivering high-complexity Red Team engagements end-to-end. Deep understanding of the adversary lifecycle and common tactics, techniques, and procedures (TTPs). Familiarity with evasion techniques and bypassing controls such as EDR/EPP, email/web gateways, proxies, etc. Experience in stakeholder engagement ...

Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy … development. Experience building, tuning, and maintaining SIEM detection rules. AWS security monitoring experience including: CloudTrail GuardDuty IAM VPC Flow Logs Understanding of cyber attack techniques and threat detection methodologies. Knowledge of incident triage, investigation, and escalation processes. Experience working with Windows, Linux, authentication systems, and endpoint security logs. Strong communication ...

suspicious network activity. Coordinate containment, eradication and recovery activities with infrastructure, cloud, identity and application teams. Identify indicators of compromise and attacker tactics, techniques and procedures, using frameworks such as MITRE ATT&CK. Perform proactive threat hunting to identify suspicious activity and potential threats that may have bypassed existing security ...

Lead forensic investigations across host, network and cloud environments to identify root cause, scope and impact of cyber incidents. Analyse threat actor activity, attack techniques, malware and potential data exposure. Produce high‐quality forensic reports, attack timelines and actionable recommendations for clients. Deploy and utilise incident response tooling to collect … network and application forensics. Experience investigating complex cyber incidents from initial response through to reporting and remediation. Strong understanding of threat actor tactics, techniques and procedures (TTPs). Hands‐on experience with forensic and incident response tooling. Familiarity with malware investigation and compromised system analysis. Knowledge of enterprise infrastructure, including ...

and ensure seamless integration across functions. You will drive innovation and lead R&D projects that push the limits of offensive security, replicating adversary tactics at scale to uncover vulnerabilities and provide actionable insights. Sounds perfect to me, what specifics are you looking for? Ideal Experience We’re looking … early‐stage B2B startup focusing on enterprise clients. Experience in building and deploying offensive security solutions, with a deep understanding of adversary tactics, techniques, and procedures (TTPs). Proven experience in architecting and scaling cloud‐based solutions to support intensive data processing and real‐time threat analysis. Written clean, maintainable ...

threat intelligence, incident response, cloud security, adversary simulation, offensive security, mobile/platform security, digital forensics, trust and safetyDeep expertise in attacker tactics, techniques, and procedures with demonstrated ability to advance the state of the artProficiency in coding with experience in languages such as Python or RustTrack record of architecting ...

Plan and execute red team engagements and adversary simulations against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with … building these systems to harden them Leverage AI-assisted tooling to accelerate reconnaissance, vulnerability discovery, and exploit development, and evaluate new AI-powered offensive techniques as they emerge Help define and mature DRW’s offensive security methodology, standards, and tooling, and mentor other engineers on the security team What ...

closely engaged in day‐to‐day analysis. WHAT THIS ROLE WILL DO Conduct hands‐on cyber threat intelligence analysis focused on threat actors, campaigns, tactics, techniques, procedures, infrastructure, malware, phishing activity, ransomware, and the cybercrime ecosystems targeting live entertainment, ticketing, and e‐commerce. Produce tactical, operational, and strategic intelligence products … intelligence experience in a dedicated CTI, cyber intelligence, or threat intelligence function. Demonstrated experience conducting threat actor analysis, adversary tracking, campaign analysis, IOC/TTP analysis, and intelligence production, including use of MITRE ATT&CK or similar frameworks to structure analysis and communicate adversary behaviour. Strong understanding of the intelligence ...

risk‐based recommendations, and knowing when to seek input or elevate. Familiarisation with common Incident Response frameworks such as NIST. Strong appreciation of attacker tactics, techniques and procedures. Occasional flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability ...

2+ years ). Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling. Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Strong understanding of core networking concepts (TCP/IP, DNS, HTTP/S, proxies, firewalls ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

incident response procedures across hybrid IT environments. Some experience of threat hunting methodologies and tools across enterprise environments. A good understanding of common attack techniques, adversary behaviours, and TTPs, including familiarity with frameworks such as MITRE ATT&CK. This position requires travel both UK and international to client locations, approximately ...

experience in one or more domains: detection engineering, threat intelligence, incident response, cloud security, adversary simulation, offensive security, or digital forensicsExtensive knowledge of attacker tactics, techniques, and proceduresProficiency in coding with experience in languages such as Python, Go, C/C++, or shell scriptingExperience building security systems, tools, or capabilities ...

handling of blocking issues, and reduction of false positives. Multiple years of experience within the industry Good technical understanding computing protocols, authentication mechanisms & attack TTP’s Intermediate knowledge of Information Security fundamentals, technologies, and design principals. Understanding or demonstrable experience in securing Windows, Linux, Oracle and VM platforms. Excellent verbal ...

and review advanced Sherlocks, competitive CTF tracks, and large-scale Pro Labs scenarios. Threat Research: Conduct deep research into novel vulnerabilities, modern exploit techniques, adversary TTPs, and real-world threat actors to keep content cutting-edge. Skills, knowledge, and experience points required to unlock the role of the Senior Defensive ...

leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling and automation using Python Explore Agentic AI workflows and security ...

Experience Senior-to-mid level experience in cyber intelligence analysis required (3 - 5 years' work experience) Deep knowledge of analytical tradecraft, intelligence analysis, writing techniques and methodologies, critical thinking skills, and open source intelligence gathering techniques Strong interpersonal skills and team focused Subject matter expertise in nation-states, advanced persistent ...

problem-solving skills to enable operational excellence and implement innovative solutions to address complex security challenges. By staying current with industry best practices, policies, and procedures, you will contribute to maintaining a secure digital environment and driving continuous improvement in the firm. Job responsibilities Execute and influence the design … comprehensive security and threat intelligence strategies, policies, and procedures to enhance threat detection capabilities and protect the organization's digital assets, smart contracts, and blockchain infrastructure from cybersecurity threats Proactively monitor and analyze complex on-chain and off-chain data and systems to identify indicators of vulnerabilities and compromises, utilizing ...

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research ...

Protection Group International is seeking an experienced Digital Investigations professional to support our team working with social media platforms, governments, and non-profit organisations. The role focuses on identifying disinformation campaigns, researching information operations, and ...