25 of 25 MITRE ATT&CK Jobs in the North of England

actions, phishing simulation scenarios, and runbook updates. Conduct hypothesis-driven hunts across identity, endpoint, email, network, cloud, and application telemetry using MITRE ATT&CK and document scope, queries, evidence, findings, and follow-up actions. Vulnerability Management Partnership Validate vulnerability findings, assess risk and business exposure … Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments. Familiarity with MITRE ATT&CK and common detection, threat‐hunting, and incident‐response methodologies. Understanding of vulnerability scanning and remediation workflows and the division of responsibility ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction … sources; implement incremental loading, event-time handling, reconciliation, and recovery patterns. Engineer mappings between enterprise security data and standards such as MITRE ATT&CK and STIX while managing versioning, extensions, and organization-specific concepts. Design query patterns, graph projections, indexes, constraints, partitioning strategies, retention policies ...

particular attention to threats targeting privileged access tooling and supply chain attack vectors. Help maintain and evolve detection coverage mapped to MITRE ATT&CK. Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts. AI Integration & Automation Use AI-driven tools for alert triage … Bring 4+ years of experience in a SOC, security operations, or incident response role. Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior. Experience with at least one SIEM platform and familiarity with writing search or detection queries. Familiarity with ...

will build, validate, tune, and optimize detection logic and coverage, leveraging attacker tactics, techniques, and procedures (TTPs) and frameworks such as MITRE ATT&CK to improve accuracy and reduce false positivesExecute and coordinate security event response activities, including containment, isolation, escalation, and remediation, applying sound … attack paths, including credential theft, privilege escalation, and session/token abuseConsiderable understanding of attacker tactics, techniques, and procedures (TTPs), including MITRE ATT&CKRecord of improving operational effectiveness, including reducing alert noise, improving detection coverage, and decreasing mean time to detect and respondGreat analytical, decision-making ...

Adversarial Testing and Vulnerability Disclosure Programmes. Understanding of Cyber Threat Intelligence, phishing, social engineering and insider risk management. Good understanding of MITRE ATT&CK and NIST Cybersecurity Frameworks. Strong analytical and problem-solving skills, with the ability to investigate technical security issues and recommend appropriate ...

security principles, including OWASP Top 10, WAF and API security Experience with vulnerability management, patching and security remediation Knowledge of the MITRE ATT&CK Framework and common attack techniques Experience applying security standards such as NCSC guidance, CIS benchmarks or Microsoft Security Baselines Understanding ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

investigations in complex environments. Previous experience working within a Security Operations environment. Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework. Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender. Ability to obtain and maintain Security ...

investigations in complex environments. Previous experience working within a Security Operations environment. Strong understanding of the cyber threat landscape and the MITRE ATT&CK Framework. Knowledge of cloud and SaaS technologies including AWS, Azure, Microsoft 365 and Microsoft Defender. Ability to obtain and maintain Security ...

Endpoint, Defender for Identity or Defender for Cloud. Knowledge of vulnerability management tools such as Nessus or Qualys. Understanding of the MITRE ATT&CK framework. Previous experience within an MSP, MSSP or Security Operations Centre. Relevant Cyber Security certifications, such as Microsoft ...

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG : LLM-based extraction ...

Essential Skills (Both Levels): Practical experience in Threat Hunting, SOC operations, or Cyber Forensics. Strong understanding of adversary TTPs and frameworks (MITRE ATT&CK, Cyber Kill Chain). Familiarity with SIEM platforms and threat intelligence integration. Scripting skills (Python, PowerShell, Regex) for automation. Excellent analytical ...

including OSINT and internal telemetry. Experience supporting cyber incident investigations or incident response. Strong written and verbal communication skills. Knowledge of MITRE ATT&CK and/or Cyber Kill Chain . Desirable: CrowdStrike or Microsoft security experience, relevant CTI certifications such as CPTIA, CRTIA ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and SaaS ...

function such as infrastructure or 3rd line support with a personal interest in cyber security Experience or knowledge within ethical hacking, MITRE ATT&CK and Threat Hunting/Threat Intelligence technics Knowledge and experience of using a range of security products covering, but not limited ...

good working knowledge of Incident Management Processes Using Threat Intelligence to prioritise threats to monitored systems Understanding and using the MITRE ATT&CK Framework Working knowledge of end-point security technologies and their management technologies (Anti-virus, EDR, XDR) Our Package Tailored benefits make ...

identity systems, or cloud environments Foundational understanding of common attacker tactics, techniques, and procedures (TTPs), with familiarity of frameworks such as MITRE ATT&CK Analytical and problem-solving skills, with the ability to follow structured investigation processes and document findings clearly Effective communication skills, including ...

hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

between security and business and technology teams, giving practical security guidance. Carry out threat modelling using frameworks such as STRIDE and MITRE ATT&CK. Review modern architectures, including RESTful APIs and containerised microservices, and advise on security. Give security input across endpoint, network, cryptography and IAM domains. … technology, including Cloud and AI. Exposure to RESTful APIs and containerised microservices. Experience with threat modelling frameworks such as STRIDE and MITRE ATT&CK. Significant knowledge of endpoint, network, cryptography and IAM security. Awareness of ISO 27000 series, PCI DSS, COBIT, NIST and OWASP. A security management ...

managing operational security in an Azure/365-centric environment Experience in analysis of cyber attacks using methodologies such as MITRE ATT&CK and other relevant frameworks Demonstrable ability to keep updated on the subject matter as part of an ever-changing threat landscape Bachelors ...

most common web security risks) and threat modelling (spotting how a system could be attacked) with frameworks such as MITRE ATT&CK. You ve built and tested secure software, including authentication and authorisation. Experience with CI/CD, DevOps and automated testing setup. Experience in C++, Rust ...

eg. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. endpoint, network, cryptography and IAM. The nice ...

eg. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks eg. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments eg. endpoint, network, cryptography and IAM. The nice ...