Adversary Emulation Analyst
Job in
City Of London, Central London, Greater London, England, UK
Listed on 2026-05-30
Listing for:
TP ICAP Group Services Ltd
Full Time
position Listed on 2026-05-30
Job specializations:
-
IT/Tech
Cybersecurity, IT Consultant, Security Manager, Systems Engineer
Job Description & How to Apply Below
Role Overview
TP ICAP is seeking an experienced Red/Purple team operator to assist the Adversary Emulation Manager with elevating TP ICAP’s prevention and detection capability.
Role Responsibilities- Define and execute purple team sprints that materially and demonstrably improve TP ICAP’s ability to prevent and detect modern attacks.
- Simulate both established and emerging attacker TTPs and personally build the respective detection rules and response procedures.
- Through the delivery of purple team sprints, identify opportunities to reduce TP ICAP’s attack surface using preventative controls.
- Work in tandem with the SOC to tune existing rules and increase alert fidelity/decrease alert fatigue.
- Include analysts on the purple team journey, aiding in staff retention.
- Train analysts in modern attacker TTPs and the ‘attacker mindset’.
- Work with the Security Engineering team as necessary to support the deployment and tuning of security-related tooling, particularly those that pertain to prevention and detection.
- Develop processes for attack surface monitoring and constant validation through automation.
- Act as an escalation point for the SOC and assist with incident response.
- Feed into prioritisation of sprint focus areas.
- Practical experience emulating sophisticated cyber-attacks, likely in a Purple or Red Team capacity.
- Active contributor to offensive security research and/or tooling, perhaps presenting this research at industry-recognised conferences and forums.
- Ability to evade defensive controls such as EDR and AV, tailoring open-source tooling and rolling your own where required.
- Experience working closely with the SOC to build detection capability.
- Strong knowledge of offensive security and modern attacker TTPs.
- Familiarity with the Mitre ATT&CK framework.
- Development/automation experience.
- Familiarity with AWS is preferred.
Manager / 6 – Hybrid / Mid-level (LI-Hybrid, LI-MID)
LocationUK – 135 Bishopsgate, London
TP ICAP is an equal‑opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.
#J-18808-LjbffrNote that applications are not being accepted from your jurisdiction for this job currently via this jobsite. Candidate preferences are the decision of the Employer or Recruiting Agent, and are controlled by them alone.
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
To Search, View & Apply for jobs on this site that accept applications from your location or country, tap here to make a Search:
Search for further Jobs Here:
×