16 of 16 YARA Jobs in the UK

Security awareness and experience in all areas of IT, primarily Network Security, Infrastructure and the secondary area being Operating Systems & Applications. Demonstrable experience with YARA and Sigma rulesets Knowledge of IT Security standard methodologies. Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited ...

rotation (approximately once every five weeks). Preferred Qualifications, Capabilities, and Skills Experience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent). Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security ...

shift rotation (approximately once every five weeks). Preferred Qualifications, Capabilities, and SkillsExperience with detection engineering and writing/tuning detection content (e.g., Sigma, YARA, KQL, SPL, or equivalent).Hands-on threat hunting experience using hypothesis-driven methodologies. Familiarity with SOAR platforms, scripting/automation, and AI-assisted security tooling. ...

Cyber Security. Security awareness in all areas of IT, primarily Network Security, Infrastructure and the secondary area being Operating Systems & Applications. Demonstrable knowledge with YARA and Sigma rulesets Knowledge of IT Security standard methodologies. Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited ...

Detection, or Security Monitoring. Experience securing cloud environments across AWS, Azure, or GCP. Expertise in one or more of the following: Splunk and SPL YARA rule development EDR detection engineering SIEM content development and tuning Experience mapping detections to the MITRE ATT&CK framework. Strong understanding of modern security principles ...

packet capture and analysis. Experienced in responding to security alerts and performing data-based investigations. Experienced in alert rule creation and development (SNORT, YARA, SIEM). Experienced in environment threat modeling. Experienced in identifying and handling security incidents. Preferred Qualifications (Desired Skills/Experience): Experience researching current threats and vulnerabilities ...

services such as assessments, penetration tests, Security Operations Center preferred Hands-on experience in social engineering testing and analysis preferred Experience creating and managing YARA rule sets desired Hands-on experience in incident response and computer forensics preferred Experience as a presenter on information security topics at conferences and events ...

enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules).Deep execution knowledge of generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with tools ...

focused Subject matter expertise in nation-states, advanced persistent threats, and cybercriminal organizations Experience with Splunk Experience with Threat Intelligence Platforms and tools including Yara, STIX/TAXII Experience with command line, packet analysis, network forensics, malware analysis or reverse engineering Experience with MITRE ATT&CK framework and Kill Chain ...

mitigation, quality and accuracy reviews) Production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Experience adhering ...

architecture to understand impact to enhance the overall security posture of the Firm. Leverage various technologies in a very high paced team including: Sigma, Yara, ElasticSearch, and Python. Contribute to daily monitoring of critical vulnerabilities, cyber events impacting critical third parties/vendors, and notable cyber activity/campaigns that ...

triage, and campaign attribution analysis.Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries.Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defense teams with intelligence-driven context and prioritization.Develop and refine … reverse engineering using tools such as Ghidra, IDA, or x64dbg, or with network flow analysis and host forensics.Experience authoring detection content such as YARA, Sigma, or Suricata rules, or SIEM correlation searches.Experience tracking offensive tooling and C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) across internet-scan and telemetry data.Familiarity with ...

triage, and campaign attribution analysis. Surface detection opportunities from technical research and partner with Detection Engineering to turn them into detection content such as YARA, Sigma, or SIEM queries. Support threat hunting, detection engineering, incident response, vulnerability management, fraud, and broader cyber defence teams with intelligence‐driven context and prioritisation. … reverse engineering using tools such as Ghidra, IDA, or x64dbg, or with network flow analysis and host forensics. Experience authoring detection content such as YARA, Sigma, or Suricata rules, or SIEM correlation searches. Experience tracking offensive tooling and C2 frameworks (e.g., Cobalt Strike, Sliver, Mythic) across internet‐scan and telemetry ...

root cause analysis; produce high-quality intel-informed incident reports. Create and tune detections (e.g., SIEM/SOAR, EDR) using intelligence signals (TTPs, behaviors, YARA/Sigma where applicable). Produce and present consumable intelligence outputs (e.g., flash alerts, threat overviews, executive briefs) tailored to technical and non-technical stakeholders. … patterns. Exposure to malware/TTP analysis at a functional level (family identification, persistence/discovery behaviors) and creation of detections (e.g., Sigma/YARA) is a plus. Experience producing finished intelligence products (tactical through executive) and briefing senior stakeholders. Relevant certifications (e.g., GCTI, GCFA/GCFR, GCIH, FOR578 ...

Tooling & Analysis: Experience with reverse engineering, analysis techniques, and tools such as Burp Suite Pro, Frida, Objection, JADX, IDA Pro, Hopper, Radare, ADB, Apktool, YARA, Xcode, and Android Studio. Mobile Development & DevSecOps: Knowledge of Android/iOS development, secure development practices, DevSecOps tooling, testing, and automation frameworks. Development & Reverse Engineering ...

delivery role: security assurance should speed decisions up, not slow them down. Key responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high-fidelity. Validation: test … technical point of contact across teams. Skills, knowledge and expertise or Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security ...