5 of 5 Contract MITRE ATT&CK Jobs in the North of England

engineering, vulnerability and exposure management, IAM/PAM, Zero Trust, cloud security, and security control mapping. Security standards: Practical use of MITRE ATT&CK, STIX/TAXII, CVE, CWE, CAPEC, NIST frameworks, CIS Controls, and common threat-intelligence vocabularies. GenAI and GraphRAG: LLM-based extraction … sources; implement incremental loading, event-time handling, reconciliation, and recovery patterns. Engineer mappings between enterprise security data and standards such as MITRE ATT&CK and STIX while managing versioning, extensions, and organization-specific concepts. Design query patterns, graph projections, indexes, constraints, partitioning strategies, retention policies ...

SIEM administration, platform support or security tooling operations. Your responsibilities: 1. Design, develop and maintain threat-led detection content aligned to MITRE ATT&CK and organisational threat models. 2. Translate threat intelligence, threat hunting findings, red/purple team outcomes and incident lessons learned into … hypotheses generate and automated rule creation pipeline. Your Profile Essential skills/knowledge/experience: 1. Detection Engineering: Threat-led detection development, behavioral analytics, ATT&CK mapping, detection tuning, validation and life cycle management. 2. Threat Analysis & Hunting: Threat intelligence, threat modelling, adversary TTP analysis, attack path ...

detections rather than day-to-day SIEM administration or security tooling support. Key Skills: Threat-led detection engineering and behavioural analytics MITRE ATT&CK mapping and adversary TTP analysis Threat intelligence, modelling and hunting Detection development using KQL, SPL or Sigma Python and PowerShell automation ...

security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current ...

e.g. RESTful APIs and containerised microservices. Up-to date on emerging threats and experienced with threat modelling frameworks e.g. STRIDE/MITRE ATT&CK. Significant knowledge of cyber security domains and how they apply to Enterprise business environments e.g. endpoint, network, cryptography, and IAM Certifications in security ...