26 to 50 of 50 MITRE ATT&CK Jobs in the UK

detection-as-code where possible. Reduce false positives and improve detection quality and coverage. Map detections to threat behaviours (e.g. MITRE ATT&CK). Validate detections through testing, incidents, and simulations. Log & Telemetry Management Onboard and maintain log sources across cloud, identity, endpoint, network ...

Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails. Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.Ability to manage security findings ...

background Experience analysing threat actor activity and attack methodologies Strong reporting and stakeholder engagement skills Knowledge of intelligence frameworks such as MITRE ATT&CK Information Assurance Consultant Key responsibilities include: Information Assurance (IA) and Governance, Risk & Compliance (GRC) activities Quality assurance and quality management support ...

securityProgramming or scripting experience, preferably in Python, and exposure to automation platformsStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK frameworkExperience mentoring or leading within a security operations environmentStrong analytical skills with the ability to investigate complex threats, identify root causes ...

vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. Build and maintain security tooling and automation from policy-as-code ...

accurate incident records in JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive analysis ...

point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation alone. Communicate security findings ...

Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill Chain, NIST CSF, and security event classification. If you're a skilled SOC Analyst with strong QRadar experience ...

automation skills (Python, Bash or similar). Experience configuring SIEM platforms. Understanding of security frameworks and threat frameworks such as MITRE ATT&CK . Desirable Experience with Microsoft Defender. Experience with additional SIEM or observability platforms. DevSecOps and CI/CD pipeline security experience. Security ...

Identity Defender for Office 365 Microsoft Entra ID Intune Azure security architecture Logic Apps/Sentinel playbooks PowerShell or Python MITRE ATT&CK Microsoft Security architecture and tenant assessments Previous experience working directly for Microsoft , or within a leading Microsoft Security Partner, MSSP or specialist ...

possess: Strong experience with Microsoft-centric environments (M365, Azure, Intune, security baselines). Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles. The ability to manage operational workload while progressing ongoing improvement initiatives. Strong communication and stakeholder ...

concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know ...

sponsorship available for this role. Desirable Experience working within Defence, MOD or other high-assurance environments. Understanding of frameworks such as MITRE ATT&CK, CAF or NIST. Experience designing or maintaining infrastructure used to support offensive security operations. Experience developing tools, automation or bespoke offensive ...

CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security ...

tools and technologies, such as SIEM, IDS/IPS, WAF and vulnerability scanners. Knowledge of common adversarial Tactics, Techniques and Procedures (Mitre Att&ck TTPs).Knowledge of security standards and frameworks (e.g. ISO27001, NIST CSF, AWS FSBP) is beneficial. Relevant security certifications (e.g. GCLD, Security+ ...

pairing practices that spread security knowledge across the team Tooling and practice familiarity Familiarity with structured threat modelling approaches - STRIDE, MITRE ATT&CK, attack trees - and experience embedding these into agile delivery ceremonies Experience integrating SAST, SCA, dependency scanning, and container security tooling into ...

hunting Investigating and responding to security incidents Engineering and improving SIEM environments Building and tuning detection rules Developing detection coverage around MITRE ATT&CK Supporting and maintaining client security platforms Scripting and automating SOC processes Helping develop and mature the UK SOC capability What ...

Cyber security regulations and industry framework e.g. GDPR, Network and Information Systems (NIS) regulations, NCSC; Knowledge of ITIL; Knowledge of Mitre ATT&CK etc; Threat monitoring and intelligence gathering and assessment; processes to scan for vulnerabilities and implementing fixes and mitigations; Incident response management Leadership ...

/CD principles within secure environments Strong written reporting and technical documentation skills Understanding of threat frameworks such as MITRE ATT&CK Desirable criteria Experience working within Defence, National Security or protectively marked environments Experience with Active Directory, Windows Services, Scheduled Tasks and IIS SIEM ...

landscape by drawing on credible, up-to-date threat information. Contribute to threat modelling using recognised methods such as STRIDE and MITRE ATT&CK for Industrial Control Systems, expressed as attack paths. Support the preliminary security risk assessment using NIST ...

endpoint detection platforms Knowledge of identity and access management, directory services, or privileged access solutions Understanding of security frameworks such as MITRE ATT&CK Experience working in secure or regulated environments Strong problem-solving skills and ability to work at a detailed technical level Familiarity ...

assurance activities are identified, specified, and evidenced throughout the project lifecycle. Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls. Define monitoring and logging requirements to detect control failures, security incidents ...

SIEM, Proxy, EDR, DLP and SEG) Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Excellent communication skills, both written and verbal, with good documentation. Minimum of 5+ years of experience in Security Engineering, Security Automation/ ...

with other IT teams to provide guidance and recommend mitigation strategies for vulnerabilities. As a Senior Vulnerability Management Engineer a knowledge of the MITRE Attack Framework would be advantageous. You will help manage and configure our vulnerability scanning and reporting tools as well as helping administer Next ...

providing security architecture and assurance support to enterprise-scale programmes. Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK. The ability to translate risk assessments into structured, high-quality security requirements and designs. Broad technical knowledge across infrastructure, networks, systems, databases ...