26 to 50 of 215 MITRE ATT&CK Jobs in England

security platforms Design, develop, test, deploy and tune analytics rules, correlation logic, threat-hunting queries and reusable detection content aligned with MITRE ATT&CK Engineer and optimise data connectors, ingestion pipelines, Data Collection Rules, custom parsers, custom tables and API-based integrations Develop logging standards … Custom Ingestion Windows Event Forwarding and Collection XPath Filtering Windows Event IDs Sysmon PowerShell Logging Logic Apps REST APIs PowerShell Python MITRE ATT&CK Detection Coverage Analysis Git-Based CI/CD Cribl Soft Skills: Proactive, accountable and delivery-focused approach Strong analytical, troubleshooting ...

cause analysis for Defender XDR and Sentinel incidents Developing and tuning detections and KQL queries, and running threat hunts mapped to MITRE ATT&CK Hardening our Microsoft environment across Entra ID, Intune, Defender for Endpoint and Azure, and owning the vulnerability management lifecycle Administering … concise written communication, from incident reports to management-ready metrics It would be a bonus if you also have: KQL and MITRE ATT&CK knowledge Microsoft SC-200, SC-100 or AZ-500 certification Experience in financial services or another regulated environment, and familiarity with ...

detections using a Detection as Code methodology — working with version control, peer review, and automated testing pipelines. Map detections to the MITRE ATT&CK framework and contribute to improving coverage, precision, and resilience against evasion. AI-Augmented Security Operations: Help explore and apply … work with developers to remediate security findings. Security Frameworks & Standards: Working knowledge of relevant security frameworks (e.g. NIST CSF, CIS Benchmarks, MITRE ATT&CK) and compliance standards such as SOC 2 or ISO 27001. Communication & Collaboration: Strong ability to articulate technical security risks and recommendations ...

against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CK Conduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidance … Burp Suite, Nmap) and a track record of building your own when the situation calls for it Working knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improve ...

management and data-residency requirements across cloud, on-premises and third-party services. Develop detection and response architectures covering analytics rules, MITRE ATT&CK-aligned use cases, threat hunting, workbooks, watchlists, automation and SOAR playbooks. Design secure integrations with ITSM, CMDB, threat intelligence, vulnerability management … QRadar, Rapid7 or Elastic. Experience with KQL, Sigma, Logic Apps, PowerShell or other automation and detection‐as‐code approaches. Knowledge of MITRE ATT&CK, NIST SP 800-61, NCSC CAF and recognised security operations maturity models. Experience of ITIL‐aligned service design, service transition ...

scale Detection‐as‐code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft and frameworks: MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain Experience leveraging Agentic AI, Microsoft Security Copilot ...

particular attention to threats targeting privileged access tooling and supply chain attack vectors. Help maintain and evolve detection coverage mapped to MITRE ATT&CK. Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts. AI Integration & Automation Use AI-driven tools for alert triage … Bring 4+ years of experience in a SOC, security operations, or incident response role. Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior. Experience with at least one SIEM platform and familiarity with writing search or detection queries. Familiarity with ...

security controls (e.g. EDR, MFA, segmentation, privileged access, logging and detection) against known attacker tactics, techniques and procedures, mapped to MITRE ATT&CK. Interpreting and challenging the results of client penetration tests, red team exercises and vulnerability assessments, assessing scope, quality, remediation status and residual risk. Assessing … Endpoint and EDR evasion techniques OT/ICS security testing Familiarity with one or more of the following frameworks and methodologies: MITRE ATT&CK CBEST, TIBER-EU and/or STAR-FS threat intelligence‐led testing frameworks CHECK and CREST testing standards NIST ...

security platforms. Design, develop, test, deploy, and tune analytics rules, correlation logic, threat-hunting queries, and reusable detection content aligned with MITRE ATT&CK. Engineer and optimise data connectors, ingestion pipelines, Data Collection Rules, custom parsers, custom tables, and API-based integrations. Develop logging standards, onboarding patterns … XPath filtering, Windows Event IDs, Sysmon, and PowerShell logging. Azure Functions, Logic Apps, REST APIs, PowerShell, Python, and security workflow automation. MITRE ATT&CK mapping, threat-informed defence, detection coverage analysis, and use-case lifecycle management. Security engineering across endpoint, identity, cloud, network, and hybrid ...

makers and C-Suite audiences with demonstrable value. Solid understanding of global security frameworks and standards, such as NIST, ISO and MITRE ATT&CK & MITRE FiGHT We strive to offer a meaningful and inclusive application experience for all candidates. Should you require ...

will build, validate, tune, and optimize detection logic and coverage, leveraging attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK to improve accuracy and reduce false positivesExecute and coordinate security event response activities, including containment, isolation, escalation, and remediation, applying sound … attack paths, including credential theft, privilege escalation, and session/token abuseConsiderable understanding of attacker tactics, techniques, and procedures (TTPs), including MITRE ATT&CKRecord of improving operational effectiveness, including reducing alert noise, improving detection coverage, and decreasing mean time to detect and respondGreat analytical, decision-making ...

detection engineering backlog, building, tuning and retiring detections across Microsoft Sentinel and Defender, mapped to a coverage model such as MITRE ATT&CK. You’ll turn threat intelligence into detection logic and hunting activity, and drive our automation and SOAR maturity by building Logic App playbooks that … SOAR and automation content (for example Sentinel Logic Apps), including monitoring for silent failure A strong grasp of attack patterns and MITRE ATT&CK, and how to turn them into a detection coverage model Experience directing a managed or outsourced SOC or MDR provider, setting ...

project priorities, timelines, and specialist skills. *Conduct security risk assessments using recognized threat modelling methodologies such as STRIDE, DREAD, and MITRE Att&ck. *Produce high-level and detailed security architecture and design documentation for complex, high-security-impact initiatives. *Define security requirements based on risk assessments, organisational … providing security architecture support within enterprise-scale technology projects. *Strong understanding and practical application of threat modelling techniques, including STRIDE, DREAD, MITRE Att&ck, or similar frameworks. *Experience producing structured, high-quality security designs and technical documentation. *Broad technical knowledge across infrastructure, networking, operating systems ...

decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary: £50,000 – £70,000 (dependent on experience … writing and board‐level presentation capability. Experience leading client engagements and managing stakeholders. Ideally big 4 experience Technical Expertise Familiarity with MITRE ATT&CK and FAIR methodologies. Qualifications MSc in Cyber Security (or equivalent) CEH, CompTIA Security+ (required or equivalent experience) CE Advisor or prepared ...

against trading systems, corporate IT, and cloud environments, modeling realistic attacker tactics, techniques, and procedures (TTPs) mapped to frameworks such as MITRE ATT&CKConduct penetration tests across networks, web and internal applications, APIs, and cloud infrastructure, and report findings with clear, actionable remediation guidanceDesign and build custom … BloodHound, Burp Suite, Nmap) and a track record of building your own when the situation calls for itWorking knowledge of the MITRE ATT&CK framework, adversary emulation, and detection evasion techniques, along with enough understanding of defensive controls and tooling to help defenders improveA track ...

remediation processes Develop and mature the Incident Response and Threat hunting capabilities. Implementation of Incident Response frameworks/methodologies such as Kill Chain, MITRE, Threat Modelling, Diamond Model. Development of Threat Intelligence capabilities and integration of such controls with the security monitoring framework. Development of Security monitoring … Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Relevant experience with MITRE Att&Ck alignment with security monitoring use cases. Relevant experience with cloud security assessments aligning it to industry standard benchmarking such as CIS. ...

firewalls, VPNs, proxies, and security protocols. Experience securing Azure, AWS, or GCP environments. Knowledge of cyber security frameworks such as NIST, MITRE ATT&CK, and Cyber Kill Chain. Excellent communication and stakeholder management skills. What You'll Gain Opportunity to work in a mature ...

Adversarial Testing and Vulnerability Disclosure Programmes. Understanding of Cyber Threat Intelligence, phishing, social engineering and insider risk management. Good understanding of MITRE ATT&CK and NIST Cybersecurity Frameworks. Strong analytical and problem-solving skills, with the ability to investigate technical security issues and recommend appropriate ...

lessons learned. Experience producing incident records, investigation reports, management updates and post-incident findings. Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance. Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint ...

recovery and lessons learned.Experience producing incident records, investigation reports, management updates and post-incident findings.Understanding of attacker behaviours and frameworks including MITRE ATT&CK, Cyber Kill Chain and NIST incident response guidance.Knowledge of enterprise networking, identity and access management, cloud services, email security, endpoint security ...

findings to both technical and non-technical stakeholders. A solid understanding of incident response methodologies, digital forensics and frameworks such as MITRE ATT&CK and NIST. Exposure to Microsoft security technologies, threat hunting, scripting (PowerShell, Python or KQL) or forensic tooling would be advantageous. ...

/IPS Managing Security Operations Centre (SOC) operations handling Detection Engineering, Incident Response Threat Modelling, Hunting and Threat Intelligence Vulnerability Management MITRE ATT&CK Framework Security Monitoring Leadership Skills Strong people management and leadership capabilities. Ability to coach and develop cyber security professionals. Ability ...

core network protocols including DNS, HTTP, SMB and LDAP, together with operational knowledge of Windows, macOS and Linux. Working knowledge of MITRE ATT&CK and experience applying it during investigations or detection development. Clear written and verbal communication skills, with the ability to provide accurate ...

environments. Understand how threat actors exploit misconfigurations, identity weaknesses, vulnerable assets, exposed services, and weak security controls. Apply frameworks such as MITRE ATT&CK to help clients understand attack paths, prioritise exposures, and improve cyber defence maturity. Understand the business, privacy, security, and compliance challenges ...

security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines Understanding ...