26 to 48 of 48 MITRE ATT&CK Jobs in the UK

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

workflows. Cybersecurity Foundation: Working knowledge of security operations, threat lifecycle, alert triage, WAF, API security, and common security frameworks (e.g., MITRE ATT&CK, NIST). AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira ...

cloud. You will write and tune Wazuh decoders and rules, including PCRE2-based decoders for awkward log formats, mapping detections to MITRE ATT&CK. You will onboard new client log sources, from endpoint agents and firewalls to cloud tenants and Microsoft Sentinel integrations, and make sure each … writing; Graylog and OpenSearch or Elasticsearch cluster administration; HAProxy; Nagios, Zabbix or similar; Microsoft Sentinel or Azure Log Analytics; familiarity with MITRE ATT&CK; MySQL and PHP; Linux or SIEM certifications such as Linux+, LPIC, RHCSA, Security+ or CySA+; managed service provider experience; involvement in the security ...

detections rather than day-to-day SIEM administration or security tooling support. Key Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation ...

identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

knowledge of key system artefacts for each Memory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework Understanding of threat actor motivations and methods, and how systems are exploited Excellent communication, from technical practitioners to executive ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ATT&CK and common attacker techniques. Improving detection rules, investigation playbooks or response workflows. Relevant certifications, such as Microsoft SC-200, CompTIA Security+ ...

hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity ...

during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with ...

learning systems, or knowledge of JSP 936 Understanding of AI attack types such as prompt injection, data poisoning and agent tool misuse, including MITRE ATLAS Familiarity with NCSC secure AI guidance and the UK AI Cyber Security Code of Practice Structured assurance notations such ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...