26 to 50 of 53 MITRE ATT&CK Jobs in the UK

such as CrowdStrike , Microsoft Defender , or similar platforms. Proven experience investigating and responding to cyber security incidents. Good understanding of the MITRE ATT&CK framework and contemporary cyber threat landscapes. Experience managing security incidents within a corporate or enterprise environment. Strong analytical, problem-solving ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

understanding of cyber threat detection and incident response methodologies. Knowledge of attacker tactics, techniques, and procedures (TTPs). Familiarity with the MITRE ATT&CK Framework. Experience correlating security telemetry from multiple sources to assess threats and incidents. Strong documentation and reporting skills. Ability to communicate ...

workflows. Cybersecurity Foundation: Working knowledge of security operations, threat lifecycle, alert triage, WAF, API security, and common security frameworks (e.g., MITRE ATT&CK, NIST). AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability to analyse security telemetry and determine incident severity, scope and impact. Experience documenting investigations, maintaining evidence and communicating findings ...

identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge ...

Strong SIEM and EDR/XDR experience. Knowledge of Windows/Linux forensics, security logs and network traffic analysis. Understanding of MITRE ATT&CK, threat hunting and incident response processes. Experience across enterprise networks, identity, endpoint security and cloud environments. Financial services experience and knowledge ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

knowledge of key system artefacts for each Memory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework Understanding of threat actor motivations and methods, and how systems are exploited Excellent communication, from technical practitioners to executive ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

trust or network access security technologies. Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. Supported or led cyber security investigations and incident response activities. Design, build and deploy ...

Rust, Ada, Java).? Desirable Experience working within Defence, MOD or other high-assurance environments. Understanding of frameworks such as MITRE ATT&CK, CAF or NIST. Experience designing or maintaining infrastructure used to support offensive security operations. Experience developing tools, automation or bespoke offensive security ...

Cobalt Strike, Sliver, Metasploit or similar. Scripting or development experience in Python, C#, PowerShell, Go, Rust or similar languages. Knowledge of MITRE ATT&CK, attacker tradecraft, detection evasion and operational security. Ability to deliver technical engagements independently and communicate effectively with stakeholders. Relevant certifications such ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, Crest CRT/CCT or equivalent. ...

Rust or similar. Comfortable travelling to customer sites, primarily across Bristol and the South West. Knowledge of frameworks such as MITRE ATT&CK, CAF or NIST. Relevant certifications such as RTO, RTO2, OSCP, OSEP, OSED, OSCE, CREST CRT/CCT or equivalent. ...

similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ATT&CK and common attacker techniques. Improving detection rules, investigation playbooks or response workflows. Relevant certifications, such as Microsoft SC-200, CompTIA Security+ ...

hands-on remediation Exposure of detection engineering Experience securing cloud-based and enterprise collaboration environments Familiarity with attack frameworks such as MITRE ATT&CK Job Offer Private healthcare. Life assurance. hybrid working in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities. ...

during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. ...

SIEM, Proxy, EDR, DLP and SEG) Experience working with Cyber Security and Incident Response frameworks such as NIST, Kill Chain, Attack life Cycle, & MITRE). Excellent communication skills, both written and verbal, with good documentation. Minimum of 5+ years of experience in Security Engineering, Security Automation/ ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

manual and tool-assisted testing techniques aligned with recognised methodologies and frameworks, including the OWASP Web Security Testing Guide, PTES, and MITRE ATT&CK. * Deliver Cyber Essentials Plus assessments, including scoping, conducting the required technical tests, verifying remediation and supporting clients through to certification in line with ...