1 to 25 of 41 Remote/Hybrid MITRE ATT&CK Jobs in London

technical lead during P1/P2 events. Own Detection & Response Capability through the design, development and optimisation of SIEM detections, maintaining MITRE ATT&CK coverage, improving detection effectiveness, and identifying gaps across ENSEK's security monitoring landscape. Drive Threat‐Informed Security Operations by partnering with … requirements. Key outcomes: Maintain an effective detection and response capability, continuously improving SIEM coverage, reducing false positives, and identifying gaps through MITRE ATT&CK aligned monitoring. Lead the successful resolution of security incidents, ensuring timely containment, clear stakeholder communication, thorough post‐incident reviews, and implementation ...

risk assessment for agentic applications, the model gateway, Accio, Nexus, and any novel or high‐risk AI initiative, applying STRIDE, PASTA, MITRE ATT&CK, and MITRE ATLAS as appropriate. Define and evolve AI security standards, guardrails, governance controls, and secure‐by‐design patterns … specific threats, threat modelling methodologies, adversary frameworks, and risk assessment approaches, including prompt injection, model manipulation, excessive agency, STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, and equivalent industry practices. Experience defining and evolving AI security standards, guardrails, governance controls, and secure‐by‐design ...

forensic images, and telemetry data. Identify indicators of compromise (IOCs), attacker tactics, techniques, and procedures (TTPs), and map findings to the MITRE ATT&CK framework. Support sensitive investigations while maintaining evidence integrity and chain-of-custody requirements. Engage internal and external forensic specialists when appropriate. … systems, authentication events, network traffic, and security logs. Ability to create clear investigation reports, management updates, and technical documentation. Knowledge of MITRE ATT&CK, Cyber Kill Chain, and NIST Incident Response frameworks. Understanding of enterprise networking, identity and access management, cloud security, email security, endpoint ...

exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud. Vulnerability & Configuration Management: Own vulnerability management for cloud workloads - prioritizing findings from cloud configuration assessments, and runtime protection tools. … multi‐cloud exposure is a plus. In‐depth knowledge of information security principles and cybersecurity frameworks relevant to cloud environments: MITRE ATT&CK for Cloud, CIS Benchmarks, AWS Well‐Architected Security Pillar, NIST CSF, SOC 2, ISO 27001. Willingness and ability to participate ...

proactive threat hunting based on attacker behaviour, not vendor alertsTranslating threat intelligence and incident learnings into durable, reusable detectionsMapping detections to MITRE ATT&CK and real-world attack pathsReducing alert fatigue through logic refinement, correlation, and contextual enrichmentAdvising and supporting during high-severity security incidents … plane, SaaS)Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud. Additional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer ...

build and continuously improve detection content, managed as code and version-controlled, mapping coverage to adversary tactics and techniques using the MITRE ATT&CK framework and prioritising the techniques most relevant to a financial services SaaS provider. Telemetry and visibility – maintain a clear view … detections. Working knowledge of cloud security and native cloud telemetry sources (AWS and/or Azure). Practical use of the MITRE ATT&CK framework to structure detection coverage and gap analysis. Hands-on experience building and operating SOAR playbooks and response automation, orchestrating across ...

scale Detection‐as‐code, CI/CD of detection content, and security content management Strong knowledge of adversary tradecraft and frameworks: MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain Experience leveraging Agentic AI, Microsoft Security Copilot ...

hunting at scaleDetection-as-code, CI/CD of detection content, and security content managementStrong knowledge of adversary tradecraft and frameworks: MITRE ATT&CK, MITRE Engage, MITRE D3FEND, and the cyber kill chainExperience leveraging Agentic AI, Microsoft Security Copilot ...

security platforms. Design, develop, test, deploy, and tune analytics rules, correlation logic, threat-hunting queries, and reusable detection content aligned with MITRE ATT&CK. Engineer and optimise data connectors, ingestion pipelines, Data Collection Rules, custom parsers, custom tables, and API-based integrations. Develop logging standards, onboarding patterns … XPath filtering, Windows Event IDs, Sysmon, and PowerShell logging. Azure Functions, Logic Apps, REST APIs, PowerShell, Python, and security workflow automation. MITRE ATT&CK mapping, threat-informed defence, detection coverage analysis, and use-case lifecycle management. Security engineering across endpoint, identity, cloud, network, and hybrid ...

decision‐making while driving operational security improvements aligned to recognised standards such as NIST CSF, ISO 27001, DORA, PCI‐DSS, and MITRE ATT&CK. Reporting To: Director/Head of Cyber Security Location: London (Hybrid) Employment Type: Full‐Time Salary: £50,000 – £70,000 (dependent on experience … writing and board‐level presentation capability. Experience leading client engagements and managing stakeholders. Ideally big 4 experience Technical Expertise Familiarity with MITRE ATT&CK and FAIR methodologies. Qualifications MSc in Cyber Security (or equivalent) CEH, CompTIA Security+ (required or equivalent experience) CE Advisor or prepared ...

documentation, analytical, and stakeholder management skills. Desirable Certifications such as SC-200, SC-300, CISSP, GCIH, GCIA, or equivalent. Knowledge of MITRE ATT&CK, NIST Cyber Security Framework, and Zero Trust principles. Experience with PowerShell, Python, or security automation technologies. Experience contributing to cyber service ...

network traffic analysis. Understanding of the incident response lifecycle, including detection, analysis, containment, eradication and recovery. Knowledge of frameworks such as MITRE ATT&CK, Cyber Kill Chain and NIST. Understanding of enterprise networking, identity and access management, cloud security and email security technologies. Excellent communication ...

GCIA, GNFA, CISSP, CISM, or equivalent experience in incident response and security operations. Experience with threat hunting, purple teaming, and using MITRE ATT&CK to structure detections, gaps analysis, and defensive improvements. Experience with security operations in cloud platforms and common tools (e.g., Microsoft Defender ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent ...

detection-as-code where possible. Reduce false positives and improve detection quality and coverage. Map detections to threat behaviours (e.g. MITRE ATT&CK). Validate detections through testing, incidents, and simulations. Log & Telemetry Management Onboard and maintain log sources across cloud, identity, endpoint, network ...

Preferred Qualifications: CompTIA Security+, CySA+, or other relevant certifications. Experience with tools like MS Defender, Splunk, QRadar, or Sentinel. Knowledge of MITRE ATT&CK framework. Exposure to scripting (e.g., Python, PowerShell) is a plus. Methods is passionate about its people; we want our colleagues ...

Sentinel, Defender, Splunk, or CrowdStrike Experience contributing to GRC (Governance, Risk, Compliance) or ISO standards Knowledge of ITIL, NIST, or MITRE ATT&CK frameworks Understanding of customer impact and stakeholder management within cyber contexts Methods is passionate about its people; we want our colleagues ...

security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability ...

security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability ...

security principles, technologies, best practices, and threat detection and mitigation strategiesKnowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics)The ability to identify potential threats, attack vectors and vulnerabilities in systems and applicationsThe ability to document ...

Deep understanding of AWS & Azure security ideally in a global SaaS context Experience with automation tools (Tines, Shuffler, Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Playbook and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting ...

Deep understanding of AWS & Azure security ideally in a global SaaS context Experience with automation tools (Tines, Shuffler, Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Playbook and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting ...

Understanding of cloud platforms such as Azure, AWS, or Google Cloud. Knowledge of cyber security frameworks such as NIST, ISO 27001, MITRE ATT&CK, or CIS Controls. Awareness of cyber resilience, operational resilience, business continuity, or disaster recovery principles. Experience working within financial services ...

best practice procedures (NPCC, NIST, ISO17025) evidence handling, computer systems and tools of the trade Good understanding of both the MITRE ATT&CK and Cyber Kill chain framework, network topology and EDR solutions Preferred Experience in performing mobile device acquisitions Wide understanding of programming/ ...

understanding of best practice procedures (NPCC, NIST, ISO17025) evidence handling, computer systems and tools of the tradeGood understanding of both the MITRE ATT&CK and Cyber Kill chain framework, network topology and EDR solutionsPreferredExperience in performing mobile device acquisitionsWide understanding of programming/scripting skillsExcellent ...