Purple Team Engineer – Risk & Exposure Management
Core
Prioritize and quantify cyber risk by correlating threat intelligence, vulnerability data, and attack paths to focus remediation on high-impact business exposures.
Role type
Senior IC Purple Team Engineer (Risk & Exposure Management)
Builds
Risk scoring frameworks, attack path models, and prioritized remediation roadmaps for enterprise security.
Domain
Cybersecurity / Risk Management / Healthcare
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Threat modeling, vulnerability management, adversary tradecraft (MITRE ATT&CK), risk quantification, attack path analysis, security control impact assessment, business risk translation, risk reporting, remediation tracking
Preferred skills
Attack surface management, breach and attack simulation, FAIR model, cloud risk management (AWS/Azure/GCP), purple/red teaming, detection engineering
Technologies
MITRE ATT&CK, CVSS, vulnerability management platforms, red team/purple team exercise tools, attack surface management tools, GRC platforms
Responsibilities
Correlate threat intelligence and vulnerability data to identify exploitable risks, model attack paths across identity/cloud/network, partner with Red/Blue teams to assess likelihood and impact, align technical findings to enterprise risk tolerance, communicate risk posture to leadership and GRC teams, track remediation progress and influence security investments
Seniority
Senior, hands-on IC
