20 of 20 Permanent MITRE ATT&CK Jobs in the Thames Valley

will be responsible for producing an executive summary‐style report, which will include a timeline of key events mapped to the MITRE ATT&CK framework. This comprehensive report will serve as a valuable resource for stakeholders, highlighting the steps taken to combat the cybersecurity incident … circumstances``` Occasionally willing to begin work early and/or stay late when warranted for customer engagements Strong grasp of the MITRE ATT&CK framework Enjoy mentoring and assisting in the development of junior analysts A team‐player attitude with a willingness to share knowledge ...

Cloud and Entra ID Protection. Own detection engineering: write and tune KQL analytics rules and hunting queries, map coverage to MITRE ATT&CK, track false‐positive rates, and retire rules that no longer earn their place. Automate response with automation rules and Logic Apps playbooks … rules and Logic Apps playbooks. Strong KQL and detection engineering: you can write, tune and defend an analytics rule mapped to MITRE ATT&CK, and explain why it fires and why it does not. Incident response on a cloud platform: triage, containment, evidence collection ...

sign-ins, malicious OAuth consent, mailbox access), including session/token revocation Design, build and test SIEM detection rules mapped to MITRE ATT&CK, and tune out false positives without blanket whitelisting Build automation for SOC processes - enrichment, ticketing, containment - using Python, Logic Apps, APIs … security incidents from triage through to closure Hands‐on experience writing and tuning SIEM detection logic, with a solid understanding of MITRE ATT&CK and KQL (or equivalent) Practical scripting/automation experience (Python, Logic Apps, REST APIs) or hands‐on SOAR platform configuration Working ...

architectures, key components, and common IT/OT protocols. Certifications - Cybersecurity & Infrastructure Security Agency (CISA) Industrial Control Systems (ICS) Training, AttackIQ - MITRE ATT&CK, SANS Global Industrial Cyber Security Professional (GICSP), Certified Information Systems Security Professional (CISSP). Standards, frameworks, and regulatory experience including … Directive, ISA/IEC 62443 Series/ISO 27000 Series, MITRE ATT&CK, NIST Cyber Security Framework (CSF), NCSC CAF, Office for Nuclear Regulation (ONR) Security Assessment Principles, Technical Assessment Guides, and supplementary guidance. Our Culture: Our values stand on a foundation of safety, integrity ...

optimise detection content across Microsoft Sentinel, Defender XDR, CrowdStrike and associated platforms, developing advanced KQL queries and analytics rules aligned to MITRE ATT&CK. Act as senior technical owner for security platforms including Microsoft Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune, Darktrace and supporting technologies, managing … understanding of Azure, AWS and hybrid infrastructure security, with strong knowledge of networking, operating systems and attacker techniques. Practical understanding of MITRE ATT&CK, Cyber Kill Chain, NIST and SANS incident response frameworks. Experience working within regulated and audited environments, including ISO 27001 and Cyber ...

activities during major cyber security incidents. Experience contributing to the development of monitoring use cases and detection improvements. Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks. ...

standard business days including weekends and holidays - our MDR service is 24x7x365 (Hours are standard business hours) Desirable Knowledge of MITRE ATT&CK framework Experience with SQL query construction Experience with OSQuery Programming and scripting skills - proficient knowledge of PowerShell Experience with enterprise information security ...

activities during major cyber security incidents. Experience contributing to the development of monitoring use cases and detection improvements. Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks. ...

Malware defenses and monitoring experienceKnowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc.Knowledge of Mitre ATT&CK framework preferredWorking knowledge of incident response proceduresExperience with SQL query construction preferredExperience with OSQuery is a plusExperience administering and supporting Windows OS (both workstations ...

Malware defenses and monitoring experienceThreat hunting experience preferredKnowledge of common adversary tactics and techniques, e.g., obfuscation, persistence, defense evasion, etc.Knowledge of Mitre ATT&CK framework preferredWorking knowledge of incident response proceduresExperience with SQL query construction preferredExperience with OSQuery is a plusExperience administering and supporting Windows ...

Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring ...

rotation Desired: Hands-on experience with EDR, SIEM, and forensic collection tools Familiarity with OSQuery, SQL, or KQL Knowledge of MITRE ATT&CK and incident response frameworks Industry certifications such as GCIH, GCED, CompTIA Security+, or equivalent Experience contributing to playbooks, detection tuning, or service ...

threat landscape. Desirable skills and experience Experience working with vulnerability management tooling. Experience in the use of security frameworks, such as Mitre ATT&CK and the Cyber Kill Chain. Formal accreditation in Information Security such as a related degree, ISC2 CISSP, Certified Ethical Hacker, CompTIA ...

5+ years in cybersecurity with leadership experience, strong SOC background, and expertise in intrusion analysis, forensics, and malware handling. Proficiency with MITRE ATT&CK, OSQuery, SQL, Windows and Linux is expected. #J-18808-Ljbffr ...

cyber security, threat detection, and incident response Familiarity with attack frameworks, exploitation techniques, and threat actors Knowledge of security tools, MITRE ATT&CK, and industry best practices Preferred Qualifications Security certifications (CISSP, CISM, Security+, CEH) Experience with CrowdStrike products and services Background in enterprise software ...

clear client-facing updates. Candidates should have 5+ years in a SOC, strong endpoint/security skills, and familiarity with the MITRE ATT&CK framework, SIEMs, and OSQuery. #J-18808-Ljbffr ...

incidents and provide senior technical depth across multiple toolchains. Key duties include designing SIEM detections aligned to MITRE ATT&CK, mentoring analysts, and driving improvements in detections and playbooks while working with Sentinel, Defender XDR, CrowdStrike, Entra #J-18808-Ljbffr ...

basic malware analysis Basic understanding of at least one of the following: OSQuery, SQL, and KQL Knowledge of frameworks such as MITRE Attack and Cyber Kill Chain Ability to work some weekends and holidays Experience with Windows and Linux command and script interpreters Desired: Cyber security certifications (GCIH ...

basic malware analysisBasic understanding of at least one of the following: OSQuery, SQL, and KQLKnowledge of frameworks such as MITRE Attack and Cyber Kill ChainAbility to work some weekends and holidaysExperience with Windows and Linux command and script interpretersDesired:Cyber security certifications (GCIH, CompTIA Sec+, eJPT, etc.)Experience ...

experience; IDS, IPS, EDR, and basic malware analysisUnderstanding of at least one of the following: OSQuery, SQL, and KQLExperience applying frameworks such as MITRE Attack and Cyber Kill ChainAbility to work some weekends and holidaysKnowledge of Windows and Linux command and script interpretersDesired:Advanced cyber security certifications (GCFE ...