4 of 4 Remote/Hybrid MITRE ATT&CK Jobs in Hampshire

SIEM and XDR platforms Develop and tune detection logic using KQL or equivalent query languages Design detection use cases aligned to MITRE ATT&CK and real-world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design … consultant Lead workshops covering detection engineering, use case design and SOC maturity Guide customers on improving detection coverage and aligning to MITRE ATT&CK Clearly explain detection strategies, gaps and recommendations to both technical and non-technical stakeholders Work closely with platform onboarding and engineering ...

HTTP, SMB, LDAP. Operational knowledge of Windows, macOS and Linux. Ability to read and interpret logs from multiple sources. Awareness of MITRE ATT&CK and differentiating legitimate admin activity vs suspicious behaviour. Experience with Microsoft Sentinel, Google SecOps or other SIEM platforms. Experience with Defender ...

solutions. Experience analysing logs, alerts, security telemetry and security incident data. Strong understanding of attacker tactics, techniques and procedures, including the MITRE ATT&CK framework. Qualifications for the Senior Cyber Threat Detection and Response Analyst Essential: Relevant cyber security experience supported by industry-recognised cyber ...

within Cyber Security Operations, Threat Intelligence or Incident Response environments. Strong understanding of the Threat Intelligence Lifecycle, Cyber Kill Chain and MITRE ATT&CK Framework. Experience analysing security events, threat intelligence data and cyber threat trends. Strong research, analytical and critical thinking skills. Experience producing ...