Senior Cybersecurity Engineer – Adversary Operations, Innovation & Purple Team Operations
Core
Lead tactical purple team operations, adversary emulation, and strategic red exercises to validate security detections, processes, and team response across the enterprise.
Role type
Senior IC cybersecurity engineer (adversary operations/purple teaming)
Builds
Repeatable MSV-based validation workflows, custom adversary tooling (C2, payloads, automation), and cloud/platform attack validation infrastructure.
Domain
Cybersecurity / Adversary Operations / Purple Teaming
Required skills
Adversary emulation, purple teaming, threat hunting, detection engineering, attacker TTPs, endpoint/cloud/network security, offensive tooling development, scripting/automation, technical documentation
Preferred skills
MSV tooling, cloud/SaaS adversary tactics (web/API), automotive/manufacturing security validation, ATT&CK-aligned reporting
Technologies
MSV, AWS, GCP, Azure, C2 frameworks, scripting languages
Responsibilities
Execute tactical purple operations (persistence, privilege escalation, lateral movement, C2 testing); Design and run strategic multi-step adversary emulation exercises; Build repeatable validation workflows using MSV; Develop custom adversary tooling and automation; Partner with Detection Engineering and Incident Response to improve detections and processes; Support innovation in cloud, SaaS, endpoint, and AI-related adversary tactics; Produce technical documentation and findings.
Seniority
Senior, hands-on IC
