Senior Cybersecurity Engineer – Adversary Operations, Innovation & Purple Team Operations
Core
Lead tactical purple team operations and strategic adversary emulation exercises to validate security detections, processes, and team response across enterprise environments.
Role type
Senior IC cybersecurity engineer (adversary operations/purple teaming)
Builds
Repeatable validation workflows using MSV and custom tooling for visibility, logging, and detection testing
Domain
Cybersecurity, Adversary Operations, Purple Teaming
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Adversary emulation, purple teaming, threat hunting, detection engineering, attacker TTPs, endpoint security, cloud security, logging technologies, offensive/validation tooling, automation/scripting
Preferred skills
MSV tooling, cloud/SaaS adversary tactics, automotive/manufacturing security validation, ATT&CK-aligned reporting
Technologies
MSV, AWS, GCP, Azure, C2 frameworks, automation scripts
Responsibilities
Lead tactical purple team operations aligned to real adversary tactics; Design and run strategic multi-step adversary emulation exercises; Build repeatable validation workflows using MSV; Develop innovative adversary tooling including custom C2 and payloads; Partner with Detection Engineering and Incident Response to improve detections; Support AO innovation in cloud, SaaS, endpoint, and AI-related tactics; Produce technical documentation and findings for operational improvements
Seniority
Senior, hands-on IC