We’re looking for a Senior Threat Detection and Validation (Attack Simulation) Engineer who expects more from their career. It’s a chance to extend and improve dunnhumby’s Information Security team. It’s an opportunity to work with a market-leading business to explore new opportunities for us and influence global retailers.

The ideal candidate will have a strong background in cyber security, with a focus on detection engineering and threat/attack simulation. The candidate will be responsible for developing, implementing, testing, and managing a range of detection and simulation tools and techniques to continuously improve our security capabilities.

What you’ll be working on

• Conduct periodic validation testing (including, but not limited to, atomic testing, breach and attack simulations, adversary simulation exercises, purple teaming, tabletops, and penetration testing) to validate the effectiveness or identify security gaps and vulnerabilities in the organization’s security controls
• Analyse the results of testing and simulation exercises to identify gaps, trends and patterns, provide recommendations for improvement and follow them through to completion.
• Identifying methods by which to detect specific attacks and threats identified in the wild
• Work with other members of the security team to implement recommended improvements to the organization’s security controls
• Develop and maintain testing and simulation frameworks to ensure the continued effectiveness of the organization’s security controls
• Maintain up to date knowledge of the Cyber Security threat landscape, its associated Threat Intelligence, emerging threats, and attack techniques, for use in the testing exercises
• Support the Vulnerability Management function in identifying, prioritising and escalating vulnerability remediation and reporting on its progress

What we expect from you

• 5 years of experience in threat detection and validation, including atomic testing, breach and attack simulation, purple teaming and adversary simulation
• Experience using common security testing and analysis tools such as Atomic Red Team, Caldera, Metta, Splunk Attack Range, APT Simulator, Mimikatz, Bloodhound, Cobalt Strike, Metasploit, Kali, Pentera and SafeBreach, Cymulate
• Translating threat intelligence and TTPs into testing payloads as well as actionable detection logic for the Defensive Operations teams
• Familiarity with the MITRE ATT&CK Framework