Purple Team Engineer – Retesting & Control Validation
Core
Validating the effectiveness of security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises and penetration tests.
Role type
Senior Purple Team Engineer (Retesting & Control Validation)
Builds
Validated security posture and confirmed remediation effectiveness for healthcare systems
Domain
Cybersecurity / Healthcare IT
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability retesting, Penetration testing, MITRE ATT&CK techniques, Exploitation chain analysis, Security control validation, Detection rule tuning, Technical documentation, Adversary simulation
Preferred skills
CI/CD security testing, Detection engineering, SIEM use case testing, Python scripting, PowerShell scripting, Bash scripting
Technologies
Metasploit, Burp Suite, Nuclei, Cobalt Strike, EDR, SIEM, NDR, WAF, IAM
Responsibilities
Retest vulnerabilities from penetration tests and red team exercises, Validate security control fixes and detection rules, Reproduce real-world attack techniques to confirm mitigation, Collaborate with Blue Team and SOC to tune alerts, Document retesting methodology and residual risk, Provide validation sign-off for remediation efforts
Seniority
Senior, hands-on IC
