Skillenai

MITRE ATT&CK jobs in 2026 — demand, top roles hiring, and related skills

As of 2026-09-30, MITRE ATT&CK appears in 612 job postings indexed by Skillenai over the past 90 days — Security Engineer has the most postings mentioning MITRE ATT&CK, with demand share up 24.5% vs the prior 4 weeks.

Last updated · 90d ending 2026-09-30

Postings · last 90 days
612
Demand vs prior month
up 24.5% vs the prior 4 weeks
Top role · 17.2% of skill postings
Security Engineer
Top hiring metro
Bengaluru

Which roles want MITRE ATT&CK?

Upload your resume and Skillenai will show which roles your MITRE ATT&CK experience fits, which skills you already cover, and what is missing.

See which roles your MITRE ATT&CK experience fits →No account needed.

Prepare to discuss MITRE ATT&CK in your interview

We’re building mock interviews informed by job postings and career profiles, to help you explain how you’ve used MITRE ATT&CK.

Join the mock interview waitlist →AI or human interviews. Coming soon.

Frequently asked questions about MITRE ATT&CK

+Is MITRE ATT&CK in demand in 2026?

Yes. MITRE ATT&CK appears in 612 job postings indexed by Skillenai over the 90 days ending 2026-09-30. Security Engineer accounts for the most postings mentioning MITRE ATT&CK (17.2% of all postings mentioning MITRE ATT&CK).

+What jobs require MITRE ATT&CK?

According to the Skillenai jobs index over the 90 days ending 2026-09-30, among roles with at least 20 postings, the highest shares mentioning MITRE ATT&CK are Detection Engineer (50.0% of that role’s postings mention MITRE ATT&CK), Offensive Security Engineer (36.9% of that role’s postings mention MITRE ATT&CK), SOC Analyst (30.8% of that role’s postings mention MITRE ATT&CK).

+What skills are commonly paired with MITRE ATT&CK?

Across job postings indexed by Skillenai (90 days ending 2026-09-30), MITRE ATT&CK most often appears alongside SIEM, Python, incident response, EDR, Threat hunting.

+Where is MITRE ATT&CK most in demand?

As of 2026-09-30, the metro areas posting the most jobs requiring MITRE ATT&CK are Bengaluru, New York City, Seoul, Tel Aviv, Hyderabad, according to the Skillenai jobs index.

+How can I keep up with new MITRE ATT&CK content and jobs?

Skillenai indexes news, blog posts, and research papers mentioning MITRE ATT&CK alongside the jobs index. You can subscribe to a daily email digest of new MITRE ATT&CK content from your Skillenai account.

+Which skills come before and after MITRE ATT&CK?

The skill-flow chart shows skills documented in adjacent positions across observed employer changes. An outgoing skill is documented in the following position but not the preceding one. These are ideas to explore, not proven prerequisites, acquisition dates, or levels of mastery. Each ribbon counts employer moves with that skill pair; one move can contribute several pairs.

Weekly indexed postings requiring MITRE ATT&CK — last 90 days

Salary distribution

Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized

Career paths around MITRE ATT&CK

Skills documented before and after this skill across employer changes.

Historical career profiles · all locations

Skills before MITRE ATT&CK

Before MITRE ATT&CKNessus → MITRE ATT&CK: 6 observed employer moves with this skill pairSplunk → MITRE ATT&CK: 5 observed employer moves with this skill pairpython → MITRE ATT&CK: 4 observed employer moves with this skill pairPenetration Testing → MITRE ATT&CK: 3 observed employer moves with this skill pairNmap → MITRE ATT&CK: 2 observed employer moves with this skill pairMetasploit → MITRE ATT&CK: 2 observed employer moves with this skill pairMFA → MITRE ATT&CK: 2 observed employer moves with this skill pairAWS → MITRE ATT&CK: 2 observed employer moves with this skill pairMITRE ATT&CKNessus: 6 movesNessus6 movesSplunk: 5 movesSplunk5 movespython: 4 movespython4 movesPenetration Testing: 3 movesPenetrationTesting3 movesNmap: 2 movesNmap2 movesMetasploit: 2 movesMetasploit2 movesMFA: 2 movesMFA2 movesAWS: 2 movesAWS2 moves

Skills after MITRE ATT&CK

After MITRE ATT&CKMITRE ATT&CK → ISO 27001: 2 observed employer moves with this skill pairMITRE ATT&CK → Azure: 2 observed employer moves with this skill pairMITRE ATT&CK → PCI-DSS: 2 observed employer moves with this skill pairMITRE ATT&CK → AWS: 2 observed employer moves with this skill pairMITRE ATT&CK → C#: 1 observed employer moves with this skill pairMITRE ATT&CK → ci/cd: 1 observed employer moves with this skill pairMITRE ATT&CK → SentinelOne: 1 observed employer moves with this skill pairMITRE ATT&CK → Kyber: 1 observed employer moves with this skill pairMITRE ATT&CKISO 27001: 2 movesISO 270012 movesAzure: 2 movesAzure2 movesPCI-DSS: 2 movesPCI-DSS2 movesAWS: 2 movesAWS2 movesC#: 1 movesC#1 movesci/cd: 1 movesci/cd1 movesSentinelOne: 1 movesSentinelOne1 movesKyber: 1 movesKyber1 moves
How to read this chart · view counts

Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.

The following position documents a skill that the preceding position does not. Skills must be linked to both positions, with clear dates and no overlap. One move can connect several skill pairs. These patterns suggest skills to explore; they do not establish prerequisites, when a skill was learned, or a higher skill level.

Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.

Observed connections and move counts
ConnectionMoves
Before: Nessus6
Before: Splunk5
Before: python4
Before: Penetration Testing3
Before: Nmap2
Before: Metasploit2
Before: MFA2
Before: AWS2
After: ISO 270012
After: Azure2
After: PCI-DSS2
After: AWS2
After: C#1
After: ci/cd1
After: SentinelOne1
After: Kyber1

Roles most likely to require MITRE ATT&CK

Among roles with at least 20 postings in the same period.

RolePostings mentioning skill% of role postings mentioning skill
Detection Engineer1450.0%
Offensive Security Engineer2436.9%
SOC Analyst830.8%
Security Automation Engineer1322.4%
Safeguards Enforcement Analyst518.5%
Penetration Tester1715.0%
Security Operations Engineer812.7%
Security Researcher610.9%
Security Analyst4010.5%
Security Operations Analyst29.5%

Roles with the most MITRE ATT&CK postings

RolePostings mentioning skillShare of skill postings
Security Engineer10517.2%
Security Analyst406.5%
Offensive Security Engineer243.9%
Cybersecurity Engineer172.8%
Penetration Tester172.8%
Information Security Engineer162.6%
Detection Engineer142.3%
Information Security Analyst142.3%
Cybersecurity Analyst132.1%
Security Automation Engineer132.1%

Top companies posting jobs requiring MITRE ATT&CK

Employers ranked by indexed job postings in the last 90 days.

Top companies posting jobs requiring MITRE ATT&CK
CompanyPostings · 90 days
Stripe15
Coupang10
AlphaSense8
CrowdStrike8
BeyondTrust7
Anthropic6
MUFG6
BCG6
Asana6
Cisco6

Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.

Top metros hiring for MITRE ATT&CK

NamePostingsShare
Bengaluru274.4%
New York City132.1%
Seoul122.0%
Tel Aviv111.8%
Hyderabad101.6%
Pune101.6%
Warsaw101.6%
Lisbon91.5%
Boston81.3%

Skills commonly paired with MITRE ATT&CK

SIEM (316)Python (280)incident response (205)EDR (205)Threat hunting (170)SOAR (152)threat intelligence (147)AWS (126)Splunk (110)PowerShell (104)

Get a daily email digest of new MITRE ATT&CK content

Skillenai indexes news articles, blog posts, and research papers that mention MITRE ATT&CK. Click below and we'll open a pre-filled daily digest — change the cadence to hourly or weekly if you prefer, then save. Free account required (~30 seconds).

Get the MITRE ATT&CK content digest →Browse all skills →

Explore related pages

How this was computed

Counts derive from the Skillenai jobs index over the 90 days ending 2026-09-30. Skills are resolved against the Skillenai canonical taxonomy, so the same entity is counted whether a posting writes 'Python', 'Python 3', or 'python'. Role prevalence divides postings mentioning MITRE ATT&CK by all postings for each role in the same window, ranking roles with at least 20 postings. Role distribution divides each role’s MITRE ATT&CK postings by all MITRE ATT&CK postings, including postings without a role. Shares need not sum to 100% for the displayed roles. Pages refresh weekly (or daily for the top-50 most-requested skills). Adjusted posting share: 0.2% to 0.3%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,596 identified employers and covers 68% of earlier and 72% of latest indexed postings. Windows: 2026-06-02 to 2026-08-31 and 2026-06-30 to 2026-09-28 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.

source
Skillenai jobs index, deduplicated daily
entity_id
ffab9bd77490c8f6
data_as_of
2026-09-30
window_days
90
Hiring engineers who use MITRE ATT&CK?

The demand, skills, and geo numbers on this page come from the same Skillenai labor market index that powers our API. Use it for compensation benchmarking, hiring-competition analysis, and skill-adoption tracking.

Skillenai for recruiters →
Compiled by Jared Rand · Data sourced from the Skillenai labor market index