8 of 8 Remote/Hybrid MITRE ATT&CK Jobs in the North West

actions, phishing simulation scenarios, and runbook updates. Conduct hypothesis-driven hunts across identity, endpoint, email, network, cloud, and application telemetry using MITRE ATT&CK and document scope, queries, evidence, findings, and follow-up actions. Vulnerability Management Partnership Validate vulnerability findings, assess risk and business exposure … Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments. Familiarity with MITRE ATT&CK and common detection, threat‐hunting, and incident‐response methodologies. Understanding of vulnerability scanning and remediation workflows and the division of responsibility ...

particular attention to threats targeting privileged access tooling and supply chain attack vectors. Help maintain and evolve detection coverage mapped to MITRE ATT&CK. Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts. AI Integration & Automation Use AI-driven tools for alert triage … Bring 4+ years of experience in a SOC, security operations, or incident response role. Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior. Experience with at least one SIEM platform and familiarity with writing search or detection queries. Familiarity with ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

investigations in complex environments. Previous experience working within a Security Operations environment. Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework. Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender. Ability to obtain and maintain Security ...

investigations in complex environments. Previous experience working within a Security Operations environment. Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework. Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender. Ability to obtain and maintain Security ...

Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding of the MITRE ATT&CK framework. Previous experience within an MSP, MSSP or Security Operations Centre. Relevant Cyber Security certifications, such as Microsoft ...

including OSINT and internal telemetry. Experience supporting cyber incident investigations or incident response. Strong written and verbal communication skills. Knowledge of MITRE ATT&CK and/or Cyber Kill Chain . Desirable: CrowdStrike or Microsoft security experience, relevant CTI certifications such as CPTIA, CRTIA ...

hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...