9 of 9 Permanent STIX Jobs in the UK

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG : LLM-based extraction, retrieval orchestration, agent/tool ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG : LLM-based extraction, retrieval orchestration, agent/tool ...

SIEM correlation searches. Experience tracking offensive tooling and C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) across internet‐scan and telemetry data. Familiarity with STIX/TAXII, threat intelligence enrichment pipelines, or TIP administration and automation. Familiarity with cloud services and securing cloud environments (AWS, Azure, GCP). Exposure ...

Suricata rules, or SIEM correlation searches.Experience tracking offensive tooling and C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) across internet-scan and telemetry data.Familiarity with STIX/TAXII, threat intelligence enrichment pipelines, or TIP administration and automation.Familiarity with cloud services and securing cloud environments (AWS, Azure, GCP).Exposure ...

least 3 years in a SOC leadership role. Strong knowledge of SIEM, SOAR and EDR Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII). Proven incident response and crisis management experience. Proven experience in managing SOC teams. Relevant certifications (e.g., CISSP, CISM, GIAC, CSPA,) preferred. Just ...

with threat intelligence platforms including data modeling, operational management, and production environment administration. Proficiency with commercial intelligence feeds, threat intelligence sharing frameworks such as STIX/TAXII or similar standards, and downstream intelligence integration. Strong analytical and technical writing skills with experience producing intelligence reports for both technical and executive ...

expertise with threat intelligence platforms including data modeling, operational management, and production environment administrationProficiency with commercial intelligence feeds, threat intelligence sharing frameworks such as STIX/TAXII or similar standards, and downstream intelligence integrationStrong analytical and technical writing skills with experience producing intelligence reports for both technical and executive audiencesProven ...

Subject matter expertise in nation-states, advanced persistent threats, and cybercriminal organizations Experience with Splunk Experience with Threat Intelligence Platforms and tools including Yara, STIX/TAXII Experience with command line, packet analysis, network forensics, malware analysis or reverse engineering Experience with MITRE ATT&CK framework and Kill Chain Demonstrated ...

Maintain the intelligence tooling and source estate, including commercial feeds and the open source tradecraft behind them. Technical Standards: Produce IOC sets to the STIX 2.1 taxonomy and map activity to MITRE ATT&CK against specific observed behaviour rather than generic descriptions. Team Building: Recruit and then lead the Intelligence ...