Security Engineer - Purple Team specialist H/F
Core
Conduct offensive security operations including penetration testing, active directory attacks, and business logic abuse to validate risks and improve detection.
Role type
Senior Purple Team Security Engineer
Builds
Automated detection rules, hunting queries, and security controls
Domain
E-commerce, Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Web and API penetration testing, Active Directory attack techniques, Business logic abuse, EDR and log analysis, Python scripting, Bash scripting, PowerShell scripting
Preferred skills
AI-assisted security tooling, LLM-based code audit, Agentic workflows
Responsibilities
Execute red team engagements and penetration tests across web, API, and Active Directory environments; Validate and refute risks using attack scenarios; Qualify external threat intelligence and bug bounty reports; Convert confirmed attack paths into automated detection rules and controls; Build and improve security tooling for code auditing and secret hunting; Drive findings to remediation and verify closure; Share security insights to foster security culture