3 of 3 Permanent MITRE ATT&CK Jobs in Suffolk

Perform advanced threat hunting and root cause analysis across cloud workloads, Kubernetes clusters, APIs, and user activity. Integrate external threat intelligence feeds, aligning TTPs with the MITRE ATT&CK framework. Drive continuous improvement by conducting regular purple team exercises and scenario-based tabletop tests. Cloud Security Engineering Work hands-on with GCP security controls, including … services, ideally under PCI-DSS, ISO 27001, or SOC 2. Strong Scripting or automation experience (Python, Terraform, Bash). Knowledge of threat modelling and attack frameworks (MITRE ATT&CK, Kill Chain). Familiarity with Kubernetes (GKE), container security, API hardening. Nice to Have Certifications such as: Google Professional Cloud Security Engineer CISSP, CISM, GCIH, or … GCIA Experience implementing Zero Trust Architecture in a cloud-native environment. Familiarity with OPA/Gatekeeper, Kubernetes Admission Controllers. Background in red teaming or adversary simulation (MITRE Caldera, Atomic Red Team). Experience working with BigQuery, Data Loss Prevention (DLP) tools, and Key Management Systems (KMS). Why This Role? Work directly with engineering, DevSecOps, and compliance leadership. More ❯

The skills you'll need • Good understanding of Cyber Security Principles • Endpoint Detection and Response (EDR) security tooling (CrowdStrike) • Network Detection and Response (NDR) security tooling • Understanding the Mitre Attack framework • Good understanding of networks and protocols • Windows server knowledge • Linux server knowledge including containers • Public Cloud (AWS, Azure and GCP) understanding • Happy to work occasionally Out of More ❯

skills you'll need • Very good understanding of Cyber Security Principles • Endpoint Detection and Response (EDR) security tooling (CrowdStrike) • Network Detection and Response (NDR) security tooling • Understanding the Mitre Attack framework • Good understanding of networks and protocols • Windows server knowledge • Linux server knowledge including containers • Public Cloud (AWS, Azure and GCP) understanding • Track record of Project delivery end More ❯