26 to 50 of 71 TTP Jobs in the UK

while remaining closely engaged in day-to-day analysis.WHAT THIS ROLE WILL DOConduct hands-on cyber threat intelligence analysis focused on threat actors, campaigns, tactics, techniques, procedures, infrastructure, malware, phishing activity, ransomware, and the cybercrime ecosystems targeting live entertainment, ticketing, and e-commerce.Produce tactical, operational, and strategic intelligence products including … threat intelligence experience in a dedicated CTI, cyber intelligence, or threat intelligence function.Demonstrated experience conducting threat actor analysis, adversary tracking, campaign analysis, IOC/TTP analysis, and intelligence production, including use of MITRE ATT&CK or similar frameworks to structure analysis and communicate adversary behavior.Strong understanding of the intelligence lifecycle ...

closely engaged in day‐to‐day analysis. WHAT THIS ROLE WILL DO Conduct hands‐on cyber threat intelligence analysis focused on threat actors, campaigns, tactics, techniques, procedures, infrastructure, malware, phishing activity, ransomware, and the cybercrime ecosystems targeting live entertainment, ticketing, and e‐commerce. Produce tactical, operational, and strategic intelligence products … intelligence experience in a dedicated CTI, cyber intelligence, or threat intelligence function. Demonstrated experience conducting threat actor analysis, adversary tracking, campaign analysis, IOC/TTP analysis, and intelligence production, including use of MITRE ATT&CK or similar frameworks to structure analysis and communicate adversary behaviour. Strong understanding of the intelligence ...

this role, you will use your deep understanding of both existing and emerging threat actors, experience identifying rapidly changing tools, tactics and procedures of attackers, and strong computer forensics response knowledge and skills. You must be able to see the big picture, understand evolving attacker behavior and motivations, participate and … Lead large and complex, client-facing incident response engagements, examine cloud, endpoint, and network-based sources of evidence. Recognize and codify attacker tools, tactics, and procedures (TTPs) and indicators of compromise (IOCs) that can be applied to current and future investigations. Build scripts, tools, or methodologies to enhance Mandiant ...

confidence scoring, temporal modeling, and graph enrichment capabilities. Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build ...

confidence scoring, temporal modeling, and graph enrichment capabilities. Model assets, applications, users, service accounts, privileges, vulnerabilities, misconfigurations, controls, alerts, incidents, indicators, threat actors, campaigns, tactics, techniques, and procedures. Implement graph analytics for attack paths, blast radius, privilege escalation, lateral movement, toxic combinations, identity exposure, control gaps, and vulnerability prioritization. Build ...

risk‐based recommendations, and knowing when to seek input or elevate. Familiarisation with common Incident Response frameworks such as NIST. Strong appreciation of attacker tactics, techniques and procedures. Occasional flexibility may be needed for urgent incidents; we aim to plan work sustainably. Knowledgeand hands onexperience withCyber Securitytools, such as Vulnerability ...

environment. Experience investigating and responding to cyber security incidents using enterprise security technologies and processes. Strong understanding of threat detection lifecycles, attacker behaviours and tactics, techniques and procedures. Proven ability to lead, mentor and develop colleagues while fostering an inclusive, high‐performing team culture. Strong analytical and problem‐solving skills ...

2+ years ). Solid understanding of security monitoring and investigation across SIEM, EDR/XDR, and network security tooling. Working knowledge of common attack techniques, the cyber kill chain, and the MITRE ATT&CK framework. Strong understanding of core networking concepts (TCP/IP, DNS, HTTP/S, proxies, firewalls ...

Professional (CCSP) CompTIA Advanced Security Practitioner (CASP+) HTB Certified Defensive Security Analyst (HTB CDSA) Capabilities that set strong applications apart Experience applying structured analytical techniques—ACH, key‐assumptions checks or similar—to produce rigorous, bias‐resistant intelligence assessments, and comfort peer‐reviewing others’ analytic tradecraft. Working knowledge of cloud security ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

clear business implications, recommendations and decisions. Preferred Experience leading red-team, purple-team or offensive-security activity and converting identified attack paths and adversary techniques into improved detection and response. Experience in financial services, or a regulated environment. Qualifications Relevant certifications or completed professional training may include: Security Blue Team ...

environments Monitor and analyse OT network traffic for anomalies, threats, and unauthorised access using specialised IC security tools Research emerging threats, vulnerabilities, and attack techniques targeting IT/OT convergence points Analyse malware and threat actor TTPs relevant to industrial environments Conduct reverse engineering and vulnerability research on industrial protocols ...

video conference mannerisms and communication skills. Very strong verbal and written English, particularly spelling, grammar, and style. Good understanding of cyber security including TTPs (Tactics, Techniques & Procedures), common tools and industry stakeholders. Formal document and report creation for senior executives and external clients. Experience within high pace, high pressure environments ...

incident response procedures across hybrid IT environments. Some experience of threat hunting methodologies and tools across enterprise environments. A good understanding of common attack techniques, adversary behaviours, and TTPs, including familiarity with frameworks such as MITRE ATT&CK. This position requires travel both UK and international to client locations, approximately ...

Cloud, Networks) to embed intelligence into controls. Proven ability to convert intelligence into detection logic, engineering requirements and hardening improvements. Demonstrable experience analysing adversary TTP's, malware behaviour, exploit chains, and threat actor campaigns. Hands on involvement providing intelligence during investigations, containment and post incident tuning. Familiarity with threat intelligence ...

experience in one or more domains: detection engineering, threat intelligence, incident response, cloud security, adversary simulation, offensive security, or digital forensicsExtensive knowledge of attacker tactics, techniques, and proceduresProficiency in coding with experience in languages such as Python, Go, C/C++, or shell scriptingExperience building security systems, tools, or capabilities ...

handling of blocking issues, and reduction of false positives. Multiple years of experience within the industry Good technical understanding computing protocols, authentication mechanisms & attack TTP’s Intermediate knowledge of Information Security fundamentals, technologies, and design principals. Understanding or demonstrable experience in securing Windows, Linux, Oracle and VM platforms. Excellent verbal ...

workstreams across host, network, and memory forensics on Windows, Linux, macOS, and multi-cloud environments. Day-to-day work includes log analysis, artefact examination, TTP identification, evidence handling, and stakeholder engagement throughout active incidents.### Skills & ExperienceCandidates need practical expertise in digital forensics and incident response, including disk image analysis, network ...

and review advanced Sherlocks, competitive CTF tracks, and large-scale Pro Labs scenarios. Threat Research: Conduct deep research into novel vulnerabilities, modern exploit techniques, adversary TTPs, and real-world threat actors to keep content cutting-edge. Skills, knowledge, and experience points required to unlock the role of the Senior Defensive ...

leveraged to improve threat detection, automate security workflows and influence the next generation of security products. Security Researcher - Responsibilities Research emerging threats, attacker techniques and security trends Investigate how AI can enhance detection and security outcomes Develop prototypes, tooling and automation using Python Explore Agentic AI workflows and security ...

leasing scheme Cycle to work scheme Interest-free season ticket loan A wide range of social activities including squash, Zumba, arts and crafts, and TTP’s own rock band Discounts and memberships for local sports and cultural venues Please note: You must be eligible for UK Security Clearance. This role ...

TTP Group is offering a paid Summer Internship (10 weeks) for students with strong AI/ML or engineering backgrounds. You will work with consultants across disciplines, contribute to live client projects, and develop prototypes in the lab while learning the commercial side of technology products. The role emphasizes ownership ...

Mr Who? MrQ - we're an awesome, award winning online casino launched in 2018. We're big on tech, big on performance and most of all - big on fun. Over the years, we have experienced ...

seeking guidance when required. Perform host, network, and memory forensics, including Windows, Linux, macOS, and multi-cloud artefact analysis. Identify threat actor tools, tactics, and procedures (TTPs). Analyse logs, network traffic, disk images, and volatile artefacts to determine attacker intent, actions, timelines, and impact. Ensure evidence collection and handling ...

Detego Global is on the lookout for a SOC Subject Matter Expert to join our Product Management team. We are looking for a mid to senior SOC analyst with extensive operational experience who is ready ...