51 to 75 of 137 MITRE ATT&CK Jobs in England

Splunk SIEM, to enable the detection of threats across diverse platforms (e.g. cloud, endpoints, and networks)· Use frameworks like MITRE ATT&CK to map detection rules and maximise threat coverage· Use analytical platforms to query high volume datasets to identify trends and spot unusual behaviours ...

environments. Understand how threat actors exploit misconfigurations, identity weaknesses, vulnerable assets, exposed services, and weak security controls. Apply frameworks such as MITRE ATT&CK to help clients understand attack paths, prioritise exposures, and improve cyber defence maturity. Understand the business, privacy, security, and compliance challenges ...

detection-as-code where possible.• Reduce false positives and improve detection quality and coverage.• Map detections to threat behaviours (e.g. MITRE ATT&CK).• Validate detections through testing, incidents, and simulations.Log & Telemetry Management• Onboard and maintain log sources across cloud, identity, endpoint, network, and SaaS. ...

with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have:Experience with Python, Terraform, or CI/CD pipelinesFamiliarity with Microsoft Purview ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

technologies, including IDS/IPS, EDR, ATP, malware protection, and monitoring platforms. Experience with threat hunting methodologies and familiarity with the MITRE ATT&CK framework preferred. Working knowledge of incident response processes, adversary tactics and techniques, and cyber threat intelligence. Strong technical expertise in Windows ...

knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference architectures, repeatable deployment patterns ...

Operations’ function.• Define and maintain the RESPOND capability taxonomy, mapped to NIST CSF (Respond/Recover), NIST SP 800-61r3, MITRE ATT&CK, and D3FEND.• Set roadmap and strategy for SOAR platforms (Splunk SOAR, Microsoft Sentinel SOAR/Logic Apps), case management, evidence collection ...

blue team tooling and platforms (e.g., SIEM, EDR, IDS/IPS, Microsoft Sentinel, Defender for Cloud, Entra ID ) and methodologies (e.g., MITRE ATT&CK, threat modeling, log and malware analysis ). Proven ability to research emerging threats, attacker techniques, and cloud security trends and convert ...

Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails.Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.Ability to manage security findings through ...

/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.Familiarity with threat hunting, malware analysis, or forensic investigation techniques.Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures ...

/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike). Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST. Familiarity with threat hunting, malware analysis, or forensic investigation techniques. Exposure to cloud environments (AWS, Azure ...

ability to deploy resources effectively. Knowledge of regulatory frameworks including GDPR, NIS, and NCSC policies. Familiarity with industry standards such as MITRE ATT&CK, ITIL, and cyber security best practices.Desirable Skills & CertificationsCISSP, CISM, or equivalent professional cybersecurity certification. Experience with Cloud Security (AWS, Azure). ...

Cyber security regulations and industry framework eg GDPR, Network and Information Systems (NIS) regulations, NCSC; Knowledge of ITIL; Knowledge of Mitre ATT&CK etc; Threat monitoring and intelligence gathering and assessment; processes to scan for vulnerabilities and implementing fixes and mitigations; Incident response management Essential ...

equivalent technologies. Strong understanding of incident response methodologies, digital forensics principles, malware analysis, and threat hunting techniques. Working knowledge of the MITRE ATT&CK Framework, NIST Cybersecurity Framework, and incident response best practices. Experience supporting operational improvement initiatives, tool implementations, or security program maturity efforts. ...

delivery (paid)Preferred Qualifications:CompTIA Security+, CySA+, or other relevant certifications.Experience with tools like MS Defender, Splunk, QRadar, or Sentinel.Knowledge of MITRE ATT&CK framework.Exposure to scripting (e.g., Python, PowerShell) is a plus.BenefitsMethods is passionate about its people; we want our colleagues to develop ...

vulnerability management, endpoint protection, cloud security tooling, security monitoring and threat intelligence platforms. Strong understanding of cyber threat frameworks including MITRE ATT&CK, Cyber Kill Chain and the evolving cyber threat landscape affecting financial institutions. Experience managing third‐party and supplier cyber security risk, including ...

implementing enterprise-scale security automation and orchestration. Strong understanding of Security Operations and Incident Response. Deep knowledge of security frameworks including: MITRE ATT&CK NIST Cybersecurity Framework Experience with Windows, Linux/UNIX and database technologies. Strong scripting and automation skills, ideally with Python, alongside ...

party or outsourced SOCIncident response methodology ( NIST 800-61)People management + executive communicationCalm, decisive under incident pressureFamiliarity with frameworks like MITRE ATT&CK, NIST CSF, and ISO 27001Palo Alto Networks firewall policy administration desirableCertifications:Microsoft ...

sector, geography, adversary groups). Run threat‐hunting campaigns using GTI, Mandiant frontline intelligence, and UDM search. Validate detection coverage against MITRE ATT&CK using Mandiant Security Validation where in scope. Practice growth Mentor engineers and consultants; lead internal SecOps and GUS enablement. Represent … SecOps, etc.). Experience with adjacent tooling: Wiz, CrowdStrike, Splunk, Sentinel, Snyk. Consulting or systems‐integrator background. Contributions to open detection content (Sigma, MITRE, public rule repos). Benefits We believe in supporting our team members both professionally and personally. Here's how we invest in you: Compensation ...

knowledge of security operations, incident response, and cyber defence principles Desirable Experience Financial Services, Banking, Insurance, or other highly regulated environments MITRE ATT&CK mapping and detection engineering methodologies PowerShell and/or Python scripting Microsoft Security certifications ...

firm, professional services organisation, or consultancy environment. Experience working in client-facing or business-facing security roles. Knowledge of MITRE ATT&CK, threat detection, security operations, and security architecture principles. Familiarity with SOAR platforms and security automation. Relevant certifications such as CISSP, SSCP, Microsoft ...

vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. Build and maintain security tooling and automation from policy-as-code ...

point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation alone. Communicate security findings ...