metrics (fidelity, time-to-triage, false-positive rates) Map detection coverage against real-world threats (MITRE ATT&CK... attack patterns — phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks Comfortable...
and mitigations, such as data exfiltration, insecure output handling, model and data supply chain risk, and shadow AI usage... of cybersecurity, networking and cloud fundamentals, and frameworks such as OWASP, MITRE ATT&CK, NIST, and CIS. Experience using...
next era of technology - hyperscalers, AI labs, the AI hardware supply chain, data platform providers, and the broader AI ecosystem... the deployment and continuous refinement of a high-signal detection inventory mapped to MITRE ATT&CK, validating control...
, with expertise in threats such as prompt injection, model abuse, excessive permissions, data exfiltration, and supply chain... and AI governance frameworks including NIST CSF, NIST AI RMF, MITRE ATT&CK/ATLAS, OWASP Top 10 for LLM Applications, CIS, and CSA...
of AI/LLM security risks and mitigations (data exfiltration, insecure output handling, model/data supply chain risk, shadow... fundamentals, and frameworks such as OWASP, MITRE ATT&CK, NIST, and CIS. Experience securing and managing public cloud services...
, technology stack, and third-party ecosystem, mapping findings to MITRE ATT&CK. Produce clear, decision-ready intelligence... on adversary TTPs into detection coverage;maintain a coverage map against MITRE ATT&CK and identify gaps. Write efficient...
). Experience with application and software supply chain security concepts, including SAST, DAST, SCA, and SBOM. Familiarity... with relevant security and risk frameworks (NIST CSF, ISO 27001, MITRE ATT&CK, etc). Excellent written and verbal communication...
of compromise (IOCs), TTPs, and intelligence requirements. Analyze threats using frameworks such as MITRE ATT&CK and the Cyber Kill...'s industry, technology stack, supply chain, and critical business operations. Technical Threat Analysis Analyze endpoint...
and their supply chains. Reporting: Prepare detailed reports and briefings on cyber incidents, threat analysis, and investigative... chain, Indicator of Compromises (IOCs) and MITRE ATT&CK framework Analytical Skills: Requires skills and abilities...
). Experience with application and software supply chain security concepts, including SAST, DAST, SCA, and SBOM. Familiarity... with relevant security and risk frameworks (NIST CSF, ISO 27001, MITRE ATT&CK, etc). Excellent written and verbal communication...