Senior Purple Team Engineer
Core
Senior Purple Team Engineer leading incident response readiness and building a deception engineering program to detect threats and generate intelligence.
Role type
Senior IC security engineer (incident response & deception)
Builds
Deception assets (honeypots, canary tokens, decoy infrastructure), incident response playbooks, and threat intelligence feeds
Domain
Cybersecurity, Incident Response, Deception Engineering
Required skills
Incident response leadership, Deception engineering program design, Adversarial simulation planning, Offensive security operations, MITRE ATT&CK framework, Cyber kill chain, AWS cloud environment, DFIR operations, Tabletop exercise facilitation
Preferred skills
C-level stakeholder management, Cross-functional playbook development, Threat model integration
Technologies
AWS, MITRE ATT&CK, Deception tooling, SOC operations platforms
Responsibilities
Lead incident response readiness and conduct tabletop exercises, Plan and execute adversarial simulations, Design and deploy internal deception assets, Build external-facing deception capabilities, Instrument assets to generate threat intelligence, Lead DFIR during cybersecurity incidents, Document lessons learned and update playbooks