About this role

This role involves designing and operating a Purple Team adversary-emulation platform, automating security tests, and collaborating with threat intelligence and SOC teams to improve detection and response capabilities.

Key Responsibilities

Maintain adversary-emulation platform
Develop continuous security tests
Collaborate with CTI and SOC
Enhance detection coverage
Research detection brittleness

Technical Overview

The technical environment includes cloud security, automation tools like Terraform and Kubernetes, scripting in Python, Go, Bash, PowerShell, and frameworks such as MITRE ATTACK, with a focus on offensive security testing and telemetry analysis.

Ideal Candidate

The ideal candidate is a senior offensive security engineer with over 5 years of experience in adversary emulation, security automation, and platform engineering, with strong scripting skills and knowledge of detection architectures and frameworks like MITRE ATTACK.

Must-Have Skills

5+ years offensive security testing2+ years security automation2+ years platform engineering2+ years scriptingExperience with detection architecture

Nice-to-Have Skills

Cloud security in CSPsMITRE ATT&CK frameworkAdversary-emulation frameworksTelemetry generationAutomation of detection tests

Tools & Platforms

TerraformKubernetesGitHubJIRACymulatePicus

Required Skills

Security EngineeringPurple TeamAdversary EmulationTest-Execution PlatformAutomationTerraformKubernetesMITRE ATT&CKDetection and ResponseTelemetrySIEMEDRSOARSecurity AutomationCloud SecurityScripting LanguagesPythonGoBashPowerShell

Hard Skills

Security EngineeringPurple TeamAdversary EmulationTest-Execution PlatformAutomationTerraformKubernetesMITRE ATT&CKDetection and ResponseTelemetrySIEMEDRSOARSecurity AutomationCloud SecurityScripting Languages (PythonGoBashPowerShell)

Soft Skills

ResearchCollaborationProblem-solvingAutomation skillsCommunication

Industry & Role

Industry Healthcare IT

Job Function Offensive security testing and platform automation

Keywords for Your Resume

Security EngineeringPurple TeamAdversary EmulationTest-Execution PlatformAutomationTerraformKubernetesMITRE ATT&CKDetection and ResponseTelemetrySIEMEDRSOARSecurity AutomationCloud SecurityScripting LanguagesPythonGoBashPowerShell

Deal Breakers

Less than 5 years of offensive security experience, No experience with security automation, Lack of scripting skills, No knowledge of detection architecture

Senior Security Engineer

Get matched to jobs like this