26 to 50 of 58 MITRE ATT&CK Jobs in the UK

physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across ...

incidents have cross-force or sector-wide implications. Threat Analysis & Continuous Improvement Apply threat intelligence, attacker TTPs and frameworks such as MITRE ATT&CK to support investigations and response activities. Identify trends, lessons learned and opportunities to improve cyber resilience across UK policing. Contribute ...

Advanced KQL; PowerShell and/or Python automation. Entra ID, Conditional Access, Intune and Microsoft 365 security. Cloud and networking knowledge; MITRE ATT&CK, NIST and SANS frameworks. CISSP desirable. Benefits 25 days holiday, holiday trading, volunteer day, pension, life assurance, employee assistance, mentoring ...

Deep understanding of AWS & Azure security ideally in a global SaaS context Experience with automation tools (Tines, Shuffler, Tracecat) Familiarity with MITRE ATT&CK or similar frameworks Playbook and incident response experience Strong communication skills and ability to work independently SOAR experience PowerShell & Python scripting ...

such as CrowdStrike , Microsoft Defender , or similar platforms. Proven experience investigating and responding to cyber security incidents. Good understanding of the MITRE ATT&CK framework and contemporary cyber threat landscapes. Experience managing security incidents within a corporate or enterprise environment. Strong analytical, problem-solving ...

monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies ...

looking for Strong hands-on Detection Engineering/SIEM Engineering experience Proven experience writing and tuning detection logic Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain Experience reducing false positives and improving alert fidelity Excellent critical thinking and problem-solving ...

detections rather than day-to-day SIEM administration or security tooling support. Key Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation ...

breadth of technical exposure and security focus these environments can provide. Desirable Experience Knowledge of security frameworks including NIST, MITRE ATT&CK and ISO 27001. Experience leading, mentoring or influencing technical teams. Professional certifications such as CISSP, CISM or equivalent. Experience securing cloud and SaaS ...

strong cyber knowledge. Desirable: Relevant industry qualifications and certifications (CPTIA, CRTIA, SANS FOR578). Familiarity with cybersecurity frameworks such as the MITRE ATT&CK matrix and/or Cyber Kill Chain. A working knowledge of the following product sets are ideal: * CrowdStrike * Microsoft Suite * Orpheus ...

knowledge of key system artefacts for each Memory analysis Ability to explain the NIST incident response phases and work with the MITRE ATT&CK Enterprise framework Understanding of threat actor motivations and methods, and how systems are exploited Excellent communication, from technical practitioners to executive ...

Lead security assessments and provide pragmatic recommendations for cloud, application, infrastructure, data and AI-enabled solutions. · Perform threat modelling using STRIDE, MITRE ATT&CK or equivalent methods and translate findings into implementable controls. · Review RESTful APIs, containerised microservices, identity patterns, and third-party integrations ...

feed integrations, and security/process orchestration and automation Knowledge of threat modelling and adversary tactics and techniques frameworks, such as MITRE ATT&CK matrices, Cyber Kill Chain, ACH Knowledge of Common Vulnerability Scoring System (CVSS), CVE analysis, adversary exploitation techniques, attack surface management Proficiency ...

similar query languages used to investigate security events. Threat hunting and the use of threat intelligence within investigations. Familiarity with MITRE ATT&CK and common attacker techniques. Improving detection rules, investigation playbooks or response workflows. Relevant certifications, such as Microsoft SC-200, CompTIA Security+ ...

Purdue model OT resilience principles High-availability operations Critical infrastructure environments Cyber Security Skills: OT threat landscape awareness. Knowledge of: MITRE ATT&CK for ICS Adversary behaviours Industrial ransomware threats OT detection and monitoring concepts Incident response coordination. Risk communication and cyber awareness delivery. ...

evaluate current and emerging technologies to select or recommend the best solutions for the future state architecture. Knowledge of application security, MITRE ATT&CK and Threat Modelling. Broad knowledge of controls in the industry (NIST, ISO, PCI, SOC, CSF, ISO27001, SABSA and TOGAF) Identity ...

during both day to day operations and during security incidents. - A good understanding of the incident response lifecycle, common attack techniques (MITRE ATT&CK), and how incident response processes integrate with threat detection, monitoring, and wider security operations. WKCL1_UKTJ ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

firewalls, intrusion detection systems). Familiarity with key standards, frameworks, and regulations, including IEC 62443, NIST CSF, the ISO 27000 series, MITRE ATT&CK, and NIS/NIS2. Excellent stakeholder engagement and communication skills, with the ability to articulate threat-based and risk-informed security ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

professional with cyber security or information security experience Technical expertise with threat modelling using STRIDE, PASTA, attack trees, tooling and MITRE ATT&CK. Cyber security experience covering authentication, authorisation, logging and monitoring, encryption, infrastructure security and network segmentation. Development and DevOps knowledge, including CI/CD, pipelines ...