Advanced Security Validation Engineer (Purple Team)

• Research current attack techniques, threat-actor TTPs, and emerging risks, and use them as the basis for building realistic test scenarios.
• Develop and evolve test scenarios mapped to MITRE ATT&CK to discover new gaps in existing security controls.
• Understand how security controls operate across domains (endpoint, network, identity, email, cloud), and design the processes to assess, test, and measure their effectiveness.
• Work with the Blue Team to measure the detection effectiveness of security tools (e.g., EDR, SIEM, SSE), including detection coverage, alert fidelity, and time to detect, and help tune detections where gaps are found.
• Analyze how security-control products behave and understand their configuration baselines, validating that controls are deployed and tuned effectively.
• Assess technical risk and the business impact arising from security-control gaps, track remediation and advise control owners and engineering teams on closing identified gaps.
• Produce evidence-based reports, document test methodology, evidence, results, and control gaps in a clear and reproducible manner, so findings can be independently reviewed and re-tested by the relevant teams.
• Develop and customize open-source tools and scripts, and use AI to support research, analysis, and reporting, raising the quality, repeatability, and measurability of testing.

Remark: This position requires a criminal record information check prior consideration for employment to ensure safety and maintain standards of the organization.