Senior Purple Team Engineer
Core
Senior Purple Team Engineer leading incident response readiness and building a deception engineering program to detect threats and generate intelligence.
Role type
Senior IC security engineer (incident response & deception)
Builds
Deception assets (honeypots, canary tokens, decoy infrastructure), incident response playbooks, and threat intelligence feeds
Domain
Cybersecurity, Incident Response, Deception Engineering
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Incident response leadership, Deception engineering program design, Adversarial simulation planning, Offensive security operations, MITRE ATT&CK framework, Cyber kill chain, AWS cloud environment, DFIR operations, Tabletop exercise facilitation
Preferred skills
C-level stakeholder management, Cross-functional playbook development, Threat model integration
Technologies
AWS, MITRE ATT&CK, Deception tooling, SOC operations platforms
Responsibilities
Lead incident response readiness and conduct tabletop exercises, Plan and execute adversarial simulations, Design and deploy internal deception assets, Build external-facing deception capabilities, Instrument assets to generate threat intelligence, Lead DFIR during cybersecurity incidents, Document lessons learned and update playbooks
