applications, prompt injection, jailbreaks, model extraction and inversion, membership inference, data and supply-chain poisoning... ATT&CK, and platforms such as VECTR or Atomic Red Team. Hands-on with AI red-teaming frameworks such as PyRIT or Garak...
(STRIDE, PASTA, LINDDUN, MITRE ATT&CK) into automation, and make pentest scoping decisions defensible and repeatable. Set the... injection, and agent-misuse risk. DevSecOps, IaC security, or supply-chain depth, and senior-relevant certifications (e.g...
teams Supply chain leaders Regional IT organizations Global Cybersecurity teams Provide executive reporting on OT cyber... MITRE ATT&CK for ICS NIS2 Experience supporting M&A integrations and manufacturing modernization initiatives...
triage to determine attacker TTPs Perform kill chain reconstruction — map attacker activity to MITRE ATT&CK, identify... queries that map to MITRE ATT&CK coverage gaps AIDR (AI Detection & Response) Configure and tune AI-driven detection...
as a guiding authority on secure coding, threat modeling, application architecture, AI/LLM security, and software supply chain... injection, insecure output handling, training data poisoning, supply chain vulnerabilities, sensitive information disclosure...
coding, threat modeling, application architecture, AI/LLM security, and software supply chain integrity. This role requires... poisoning, supply chain vulnerabilities, sensitive information disclosure, excessive agency, and model theft. Review...
metrics (fidelity, time-to-triage, false-positive rates) Map detection coverage against real-world threats (MITRE ATT&CK... attack patterns — phishing, credential compromise, SSO abuse, cloud misconfigurations, supply chain risks Comfortable...
Mid-Level Cyber Threat Intelligence Analyst Threat Intelligence | Supply Chain Risk | Splunk Location: Greater Phoenix... on threat intelligence operations, cyber supply chain risk, threat hunting, and Splunk-driven security analytics. This role...
those related to supply chain considerations Provide threat intelligence insights and vulnerability research aligned... with frameworks such as NIST 800-53 and MITRE ATT&CK to inform cloud security architecture decisions Develop new or enhanced...
ATT&CK Framework Strong knowledge of fundamental InfoSec concepts, such as least privilege, zero trust architectures... such as software supply chain Security, securing & hardening development environments, and identifying and mitigating risk at scale...