26 to 50 of 101 MITRE ATT&CK Jobs in the UK

including TCP/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA ...

Security Information and Event Management (SIEM) platforms Security Orchestration, Automation and Response (SOAR) solutions Threat intelligence and threat modelling frameworks, including MITRE ATT&CK and Cyber Kill Chain Network security, operating systems and security technologies Microsoft security technologies, including Microsoft Defender and Purview Data Loss ...

Cloud Security Microsoft Defender Suite Kubernetes security concepts Identity and Access Management (IAM) Privileged Access Management Microsoft Entra ID (Azure AD) MITRE ATT&CK Framework Threat Intelligence Incident Response Threat Hunting SIEM Technologies Security Monitoring Security Operations (SOC) Cloud Networking Fundamentals What You'll Bring ...

exercises and risk assessments. Knowledge of threat actor tactics, techniques, and procedures (TTPs). Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Experience investigating security events and supporting incident response activities. Strong analytical, investigative, and problem-solving skills. Ability ...

investigating security alerts using SIEM, EDR and security monitoring tools A strong understanding of Modern cyber threats, attacker techniques and the MITRE ATT&CK framework Experience analysing security events across endpoint, network, identity and cloud platforms Knowledge of incident response and risk-based incident prioritisation ...

security monitoring and investigations Good understanding of SIEM technologies, log analysis and threat detections Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain Experience investigating phishing, malware, endpoint, identity and network security incidents Familiarity with Windows, Linux, Active Directory ...

Sentinel solutions. Experience developing detection rules, use cases and security monitoring capabilities. Strong threat hunting and security investigation experience. Knowledge of MITRE ATT&CK and modern security operations practices. Experience working within enterprise-scale Azure and Microsoft security environments. Desirable Skills QRadar Devo SentinelOne Mimecast ...

Sentinel solutions. Experience developing detection rules, use cases and security monitoring capabilities. Strong threat hunting and security investigation experience. Knowledge of MITRE ATT&CK and modern security operations practices. Experience working within enterprise-scale Azure and Microsoft security environments. Desirable Skills QRadar Devo SentinelOne Mimecast ...

Pentera, etc.) Hands‐on experience across Azure and Microsoft security stack Scripting/automation capability (PowerShell, Python, Bash) Strong grounding in MITRE ATT&CK, OWASP, and modern threat vectors Background in insurance, financial services, or regulated environments is highly beneficial If you are looking ...

Security initiatives within complex environments. Understanding of Security Architecture Design and secure-by-design principles. Familiarity with cyber frameworks such as MITRE ATT&CK, NIST, or Cyber Kill Chain. Experience producing intelligence reports and presenting findings to stakeholders. Strong analytical and problem-solving abilities. Excellent ...

similar security certifications. Experience with Red Team tooling such as Burp Suite, Metasploit, Wireshark, Nessus, Nmap or Hashcat. Knowledge of MITRE ATT&CK and adversary emulation frameworks. Experience securing Windows, Linux or Mainframe environments. AWS or Azure security experience. Why Join HMLR: This ...

response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework . Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder ...

response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework . Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder ...

with log source onboarding and normalisation Strong analytical and troubleshooting skills with the ability to investigate complex security events. Understanding of MITRE ATT&CK and modern cyber threat techniques. Experience working with Security Operations and engineering stakeholders. Excellent technical documentation and communication skills. Bachelor ...

environments. Understand how threat actors exploit misconfigurations, identity weaknesses, vulnerable assets, exposed services, and weak security controls. Apply frameworks such as MITRE ATT&CK to help clients understand attack paths, prioritise exposures, and improve cyber defence maturity. Understand the business, privacy, security, and compliance challenges ...

detection-as-code where possible.• Reduce false positives and improve detection quality and coverage.• Map detections to threat behaviours (e.g. MITRE ATT&CK).• Validate detections through testing, incidents, and simulations.Log & Telemetry Management• Onboard and maintain log sources across cloud, identity, endpoint, network, and SaaS. ...

technologies, including IDS/IPS, EDR, ATP, malware protection, and monitoring platforms. Experience with threat hunting methodologies and familiarity with the MITRE ATT&CK framework preferred. Working knowledge of incident response processes, adversary tactics and techniques, and cyber threat intelligence. Strong technical expertise in Windows ...

knowledge of Zero Trust architecture and the application of recognised security frameworks such as NIST CSF, ISO 27001, PCI DSS, DORA, MITRE ATT&CK and CSA guidance. Demonstrable experience operating within a Partner delivery model, including customer‐facing consultancy, reference architectures, repeatable deployment patterns ...

/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike). Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST. Familiarity with threat hunting, malware analysis, or forensic investigation techniques. Exposure to cloud environments (AWS, Azure ...

equivalent technologies. Strong understanding of incident response methodologies, digital forensics principles, malware analysis, and threat hunting techniques. Working knowledge of the MITRE ATT&CK Framework, NIST Cybersecurity Framework, and incident response best practices. Experience supporting operational improvement initiatives, tool implementations, or security program maturity efforts. ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable/Nice-to-Have: Experience with Python , Terraform , or CI/CD pipelines Familiarity ...

with SIEM, EDR, and/or detection engineeringExperience with cloud platforms (AWS & GCP)Familiarity with threat intelligence and adversary tactics (e.g., MITRE ATT&CK)Experience building or working with automation (e.g., Python, scripting, SOAR platforms)Interest or experience in applying AI/ML or data ...

blue team tooling and platforms (e.g., SIEM, EDR, IDS/IPS, Microsoft Sentinel, Defender for Cloud, Entra ID ) and methodologies (e.g., MITRE ATT&CK, threat modeling, log and malware analysis ). Proven ability to research emerging threats, attacker techniques, and cloud security trends and convert ...

Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails.Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.Ability to manage security findings through ...