16 of 16 Remote/Hybrid TTP Jobs in England

practices. Perform host and network analysis using security logs, packet captures, forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings to the MITRE ATT&CK framework. Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements. Engage internal … trend analysis, and operational metrics. Support cyber simulations and tabletop exercises to validate response processes and stakeholder readiness. Stay current with emerging threats, attack techniques, vulnerabilities, and industry best practices. Skills and Experience Essential Hands-on experience in Cyber Incident Response, Security Operations (SOC), or Cyber Defence environments. Hands ...

environment. Experience developing, testing, and tuning threat detection use cases. Good understanding of the MITRE ATT&CK framework and common threat actor tactics, techniques, and procedures (TTPs). Experience conducting proactive threat hunting and analysing security telemetry. Strong analytical, investigation, and communication skills. Ability to collaborate effectively with SOC analysts ...

analytical products to assist mitigation practices at a tactical and operational level. Analysis of advanced persistent threats including the tactics, techniques, and procedures (TTPs) of attackers. Conduct analysis at a tactical and or operational level, identifying and using appropriate analytical tools and techniques to interpret gaps, patterns and trends, assess ...

happens, and feed what you learn back into the system Harden against new adversary techniques Work with Threat Intelligence to turn new tactics, techniques, and procedures into concrete hardening work and detection coverage Prioritize infrastructure hardening across cloud, identity, and endpoints based on observed attacker behaviour rather than benchmarks alone ...

continue to evolve in line with emerging threats, customer requirements and industry standards. Research and Innovation Conduct research into emerging threat actor tactics, techniques and procedures (TTPs), offensive security tooling and adversary simulation approaches. Apply this knowledge to continuously improve technical capability and bring new ideas into customer engagements. Operational … capability development, service innovation and technical leadership activities. Research and Innovation Time: We encourage continuous learning and provide opportunities to explore new tooling, attacker techniques, research areas and emerging technologies that can be incorporated into customer engagements and future service offerings. Time to Recharge: Enjoy generous leave with the opportunity ...

continue to evolve in line with emerging threats, customer requirements and industry standards. Research and Innovation Conduct research into emerging threat actor tactics, techniques and procedures (TTPs), offensive security tooling and adversary simulation approaches. Apply this knowledge to continuously improve technical capability and bring new ideas into customer engagements. Operational … capability development, service innovation and technical leadership activities. Research and Innovation Time We encourage continuous learning and provide opportunities to explore new tooling, attacker techniques, research areas and emerging technologies that can be incorporated into customer engagements and future service offerings. What you’ll bring We are looking ...

confidence scoring, temporal modeling, and graph enrichment capabilities. Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

incident response procedures across hybrid IT environments. Some experience of threat hunting methodologies and tools across enterprise environments. A good understanding of common attack techniques, adversary behaviours, and TTPs, including familiarity with frameworks such as MITRE ATT&CK. This position requires travel both UK and international to client locations, approximately ...

handling of blocking issues, and reduction of false positives. Multiple years of experience within the industry Good technical understanding computing protocols, authentication mechanisms & attack TTP’s Intermediate knowledge of Information Security fundamentals, technologies, and design principals. Understanding or demonstrable experience in securing Windows, Linux, Oracle and VM platforms. Excellent verbal ...

leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling and automation using Python Explore Agentic AI workflows and security ...

Detego Global is on the lookout for a SOC Subject Matter Expert to join our Product Management team. We are looking for a mid to senior SOC analyst with extensive operational experience who is ready ...

Location(s):UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so ...

Location(s):UK, Europe & Africa : UK : Manchester BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so ...

Senior Threat Analyst | Manchester/Hybrid | £65,000 Location: Manchester Salary: Circa £65,000, depending on experience Hours: Full-time, Monday-Friday Contract: Permanent Working model: Hybrid, typically one day in the Manchester office every ...