26 to 50 of 79 MITRE ATT&CK Jobs in the UK

response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework . Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder ...

supporting Platform Security initiatives within complex environments.Understanding of Security Architecture Design and secure-by-design principles.Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain.Experience producing intelligence reports and presenting findings to stakeholders.Strong analytical and problem-solving abilities.Excellent written and verbal ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent ...

Splunk SIEM, to enable the detection of threats across diverse platforms (e.g. cloud, endpoints, and networks) · Use frameworks like MITRE ATT&CK to map detection rules and maximise threat coverage · Use analytical platforms to query high volume datasets to identify trends and spot unusual behaviours ...

with Microsoft SentinelFamiliarity with Microsoft Defender tools (Endpoint & O365)Exposure to Azure cloud logging and Kubernetes environmentsKnowledge of attacker TTPs and MITRE ATT&CK frameworksProactive, collaborative, and innovative mindsetDesirable/Nice-to-Have:Experience with Python, Terraform, or CI/CD pipelinesFamiliarity with Microsoft Purview ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

delivery (paid)Preferred Qualifications:CompTIA Security+, CySA+, or other relevant certifications.Experience with tools like MS Defender, Splunk, QRadar, or Sentinel.Knowledge of MITRE ATT&CK framework.Exposure to scripting (e.g., Python, PowerShell) is a plus.BenefitsMethods is passionate about its people; we want our colleagues to develop ...

with SIEM, EDR, and/or detection engineeringExperience with cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data ...

with SIEM, EDR, and/or detection engineeringExperience with cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data ...

ability to deploy resources effectively. Knowledge of regulatory frameworks including GDPR, NIS, and NCSC policies. Familiarity with industry standards such as MITRE ATT&CK, ITIL, and cyber security best practices.Desirable Skills & CertificationsCISSP, CISM, or equivalent professional cybersecurity certification. Experience with Cloud Security (AWS, Azure). ...

awarenessSecurity governance and reportingPreferred QualificationsExperience managing enterprise SOC servicesExperience leading security transformation and maturity initiativesStrong understanding of NIST CSF, ISO 27001, MITRE ATT&CK and Cyber Defence frameworksRole AlignmentThis job description aligns with Cyber Security Manager, SOC Manager, or Security Operations Lead roles within large ...

situations and can bring structure to a client problem that has none.Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale.Cloud platform experience across at least two of Azure ...

party or outsourced SOCIncident response methodology ( NIST 800-61)People management + executive communicationCalm, decisive under incident pressureFamiliarity with frameworks like MITRE ATT&CK, NIST CSF, and ISO 27001Palo Alto Networks firewall policy administration desirableCertifications:Microsoft ...

securityProgramming or scripting experience, preferably in Python, and exposure to automation platformsStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK frameworkExperience mentoring or leading within a security operations environmentStrong analytical skills with the ability to investigate complex threats, identify root causes ...

firm, professional services organisation, or consultancy environment. Experience working in client-facing or business-facing security roles. Knowledge of MITRE ATT&CK, threat detection, security operations, and security architecture principles. Familiarity with SOAR platforms and security automation. Relevant certifications such as CISSP, SSCP, Microsoft ...

Desirable Experience Experience with one or more of the following is beneficial: Splunk Microsoft Sentinel CrowdStrike Microsoft Defender ServiceNow SOAR platforms MITRE ATT&CK Detection Engineering Security Operations (SOC) Nice to Have Experience building AI platforms rather than standalone AI applications. Experience designing workflow engines ...

accurate incident records in JIRA Service Management. Detection Engineering Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework. Draft and optimise KQL queries for detection and threat hunting. Refine existing detection logic based on false positive analysis ...

threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10/MITRE ATLAS. Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ID sign … differs from on-prem. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts ...

automation skills (Python, Bash or similar). Experience configuring SIEM platforms. Understanding of security frameworks and threat frameworks such as MITRE ATT&CK . Desirable Experience with Microsoft Defender. Experience with additional SIEM or observability platforms. DevSecOps and CI/CD pipeline security experience. Security ...

vulnerabilities are caught before they ship, not after. Support threat modelling and design reviews with engineering teams, using structured methods (STRIDE, MITRE ATT&CK) to identify risks early and influence architecture decisions directly. Build and maintain security tooling and automation from policy-as-code ...

point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation alone. Communicate security findings ...

point-in-time exercise. Lead risk assessments and threat-modelling sessions , selecting methodologies (ISO 27005, NIST RMF, STRIDE, MITRE ATT&CK) that are proportionate to system criticality, and ensuring findings feed into programme governance decisions rather than sitting in security documentation alone. Communicate security findings ...

CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification.Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security ...

concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know ...