Cybersecurity Engineer – Purple Team / Red Team
Core
Senior Cybersecurity Specialist executing Threat-Led Validation, Adversary Emulation, Red/Purple Team exercises, and Detection Engineering to validate and improve SOC capabilities against real-world threats.
Role type
Senior IC cybersecurity engineer (offensive security & detection)
Builds
Enhanced detection rules, telemetry validation, and incident response capabilities for enterprise environments
Domain
Cybersecurity, Threat Intelligence, Enterprise Security
Required skills
Adversary Emulation, Red Team, Purple Team, Threat Hunting, Detection Engineering, MITRE ATT&CK, Threat Intelligence, KQL, Microsoft Sentinel, Microsoft Defender XDR, Python, PowerShell, Bash, API integration, CI/CD
Preferred skills
None stated
Technologies
Microsoft Sentinel, Microsoft Defender XDR, MITRE ATT&CK, KQL, Python, PowerShell, Bash, Git, CI/CD
Responsibilities
Design security exercises based on threat intelligence and business risks; Plan and execute Adversary Emulation, Red Team, and Purple Team campaigns; Map adversary activities using MITRE ATT&CK; Validate telemetry and detection capabilities with Detection Engineering and Threat Hunting teams; Create and optimize KQL queries and correlation rules; Evaluate end-to-end SOC capabilities for incident detection and response; Identify blind spots and false negatives; Document root cause analysis and remediation actions; Perform re-testing of remediation measures; Create scripts and automations for security tools; Develop metrics and reporting on MITRE ATT&CK coverage and detection effectiveness; Participate in Purple Team Workshops and After-Action Reviews.
Seniority
Senior, hands-on IC
