26 to 50 of 88 MITRE ATT&CK Jobs in the UK

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

Engineering Lead day-to-day SOC operations. Own Microsoft Sentinel administration and optimisation. Develop and tune detection logic using KQL and MITRE ATT&CK methodologies. Lead incident response, investigation, containment and post-incident reviews. Build automated response workflows using Logic Apps and security playbooks. Conduct ...

responseOwn the SIEM platform, including log source onboarding, the development and tuning of detection use cases and coverage tracking against the MITRE ATT&CK frameworkAct as the internal owner of the managed SOC relationship, including escalation runbooks, service reviews, triage quality and service level agreements ...

compromise activity Strong knowledge of SIEM technologies, log analysis and threat detection Experience with threat hunting and security investigations Understanding of MITRE ATT&CK, cyber kill chain methodologies and security best practices Ability to operate effectively in high-pressure environments and manage multiple incidents simultaneously ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

understanding of cyber threat detection and incident response methodologies. Knowledge of attacker tactics, techniques, and procedures (TTPs). Familiarity with the MITRE ATT&CK Framework. Experience correlating security telemetry from multiple sources to assess threats and incidents. Strong documentation and reporting skills. Ability to communicate ...

Essential Skills (Both Levels): Practical experience in Threat Hunting, SOC operations, or Cyber Forensics. Strong understanding of adversary TTPs and frameworks (MITRE ATT&CK, Cyber Kill Chain). Familiarity with SIEM platforms and threat intelligence integration. Scripting skills (Python, PowerShell, Regex) for automation. Excellent analytical ...

management experience with meaningful exposure to cyber threat intelligence is preferred Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit or CVE feeds to prioritize vulnerabilities Ability to design and implement mitigation and remediation approaches when ...

possess: Strong experience with Microsoft-centric environments (M365, Azure, Intune, security baselines). Knowledge of compliance frameworks (NCSC guidance, Cyber Essentials), MITRE ATT&CK, encryption, IAM and secure configuration principles. The ability to manage operational workload while progressing ongoing improvement initiatives. Strong communication and stakeholder ...

Trust, identity and access management, Entra ID, Azure and Microsoft 365 security./li li Experience of threat modelling and using MITRE ATT&CK to inform detection and control design./li li Working knowledge of recognised frameworks and guidance, including NCSC CAF, NIST ...

workflows. Cybersecurity Foundation: Working knowledge of security operations, threat lifecycle, alert triage, WAF, API security, and common security frameworks (e.g., MITRE ATT&CK, NIST). AI & Workflow Tooling: Practical experience interacting with generative AI tools, prompt workflows, and enterprise ticketing/orchestration platforms (e.g., Jira ...

retain remediation. Own adversarial AI defence: AI red teaming, prompt and model attack testing, and the mandatory remediation regime that follows, informed by MITRE ATLAS and current research. Translate the EU AI Act, NIST AI RMF and ISO/IEC 42001 into architectural requirements ahead of mandated deadlines … sicurezza informatica, AI per la sicurezza informatica, Application Security, CI/CD, Creazione di script, Database vettoriali, Framework MITRE ATT&CK, Gestione delle identità e degli accessi (IAM), Gestione delle vulnerabilità, Kubernetes, LangChain (FrameWork), LangGraph, Linguaggio di programmazione Python, LlamaIndex, MLflow, Modelli linguistici di grandi ...

threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10/MITRE ATLAS. Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ID sign … differs from on-prem. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts ...

security posture management. Strong security architecture knowledge, including practical experience of security design reviews and threat modelling. Good working knowledge of MITRE ATT&CK, alongside the ability to map security controls against real-world attacker techniques. Strong experience governing protective security controls, including defining security ...

Assist with incident containment, remediation activities, and post-incident analysis. Threat Modelling & Frameworks Apply established threat modelling and intelligence methodologies including: MITRE ATT&CK Cyber Kill Chain Pyramid of Pain Diamond Model Identify intelligence gaps and opportunities to enhance threat detection and response capabilities. Strategic ...

using SIEM, EDR/XDR and cloud security monitoring technologies. Strong knowledge of threat detection, attacker tactics and techniques, including the MITRE ATT&CK framework. Ability to analyse security telemetry and determine incident severity, scope and impact. Experience documenting investigations, maintaining evidence and communicating findings ...

identity, networks and applications. Strong working knowledge of frameworks such as: ISO 27001 NIST Cybersecurity Framework NIST 800-53 CIS Controls MITRE ATT&CK Experience producing board-level reporting and translating technical findings into business risk. Excellent stakeholder management skills, with the ability to challenge ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...

ability to influence both technical and senior stakeholders. CISSP (or equivalent) and TOGAF and/or SABSA. Desirable: Zero Trust, DevSecOps, MITRE ATT&CK, SIEM, PAM, Kubernetes/container security, PKI and security automation experience. We believe strong connections and community ...