and practices including NIST, OWASP, CIS, CVSS, the MITRE ATT&CK framework, and secure software development lifecycle principles...
CSF 2.0, COBIT 2019, ISO 27001, MITRE ATT&CK, and applicable regulatory regimes. Establish a unified control taxonomy..., ISO/IEC 42001, MITRE ATLAS, and emerging regulatory expectations (EU AI Act, NYDFS AI guidance, state-level AI laws...
Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can... have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being...
, DLP, MITRE ATT&CK-based detections, and coordination with NETCOM Global Cyber Center, DISA DCDC, RCC-ARNG.... Apply MITRE ATT&CK-based analytic thinking during incident investigation and coordinate with SOC leadership, service owners...
to MITRE ATLAS adversarial ML techniques (AML.T0051 LLM Prompt Injection, AML.T0054 LLM Jailbreak, AML.T0048 External Harms... - direct vs. indirect prompt injection, jailbreaks, multi-modal attacks, MCP abuse - referenced through MITRE ATLAS detection...
Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can... have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being...
enterprise. Coordinate with USIEM engineers and related cybersecurity teams to improve enabling data sources, support MITRE...
and authorization artifacts in accordance with NIST SP 800-37. Experience modeling and analyzing cybersecurity threats using the MITRE...
MITRE ATT&CK Cloud Matrix and Container Matrix. Proactively identify and close visibility blind spots. Threat Hunting: Lead... is required. Frameworks: Familiar with the MITRE ATT&CK Framework (Cloud Matrix and Container Matrix) with a proven ability to design...
within an environment that uses USIEM analytics, EDR, IDS/IPS, SOAR, Zeek metadata, Sysmon-informed MITRE ATT&CK analysis, and eMASS... to support investigation, correlation, and incident determination. Apply MITRE ATT&CK-informed analysis and available telemetry...