Senior Purple Team Validation Specialist

Synergy Connections Ltd; Abu Dhabi; Remote; AED 240,000 - 360,000; Full time

Job summary

Synergy Connections Ltd. is seeking a Senior Purple Team Validation Specialist to strengthen cybersecurity through coordinated offensive and defensive validation.

The role involves evaluating controls, threat detection, and incident response effectiveness, with work conducted remotely. You will collaborate with red/blue teams and threat intel to identify gaps, develop repeatable test cases, and implement remediation strategies.

Qualifications

• Bachelor's degree or higher in a cybersecurity-related field.
• Experience with purple teaming, security validation, or offensive/defensive testing.
• Familiarity with MITRE ATT&CK and adversary simulation techniques.
• Experience evaluating SIEM/EDR/XDR and network security platforms.
• Ability to analyze logs, telemetry, and attack simulations to identify gaps.
• Strong written and verbal communication for stakeholder reporting.

Responsibilities

• Lead purple team validation exercises to assess defensive monitoring effectiveness.
• Coordinate controlled adversary simulations using threat intel and frameworks.
• Develop validation scenarios aligned with MITRE ATT&CK tactics and techniques.
• Evaluate detection rules, endpoint monitoring, network defenses, and identity controls.
• Validate that simulated attacks trigger appropriate alerts and investigations.
• Collaborate with red/blue teams to reproduce attack scenarios and assess responses.
• Document objectives, results, and remediation recommendations.
• Support automated security control testing and continuous validation workflows.

Skills

Purple team validation

Security testing

Threat detection

Incident response

Detection engineering

Log analysis

Security operations

Technical writing

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or related

Tools

Atomic Red Team

Caldera

Prelude Operator

Job description

Job Title: Senior Purple Team Validation Specialist

Location: United Arab Emirates (Remote)

Employment Type: Full-Time

Work Arrangement: 100% Remote – Work From Home

Level: Senior

About the Role

We are seeking a Senior Purple Team Validation Specialist to strengthen organizational cybersecurity through coordinated offensive and defensive security validation. The role focuses on evaluating security controls, validating threat detection capabilities, assessing incident response effectiveness, and translating adversary simulation findings into practical security improvements.

The successful candidate will work closely with red teams, blue teams, security operations, threat intelligence, and infrastructure teams to identify defensive gaps and improve the organization's ability to detect, investigate, and respond to realistic cyber threats. All activities will be conducted remotely within formally approved testing environments and authorized scopes.

Key Responsibilities

• Lead purple team validation exercises to assess the effectiveness of cybersecurity controls and defensive monitoring capabilities.
• Coordinate controlled adversary simulations based on relevant threat intelligence and recognized attack frameworks.
• Develop validation scenarios aligned with MITRE ATT&CK tactics, techniques, and procedures.
• Evaluate security detection rules, endpoint monitoring, network defenses, identity controls, and security information and event management platforms.
• Validate whether simulated attack behaviors generate appropriate alerts and investigation opportunities.
• Collaborate with red team and blue team professionals to reproduce attack scenarios and assess defensive responses.
• Analyze detection gaps, alert quality, response delays, and security control weaknesses.
• Review security telemetry, endpoint logs, network events, authentication records, and incident investigation evidence.
• Assess the effectiveness of security monitoring and incident response playbooks.
• Recommend improvements to detection engineering, threat hunting, alert correlation, and response procedures.
• Develop repeatable validation test cases, assessment criteria, and measurable performance indicators.
• Document exercise objectives, approved testing boundaries, execution results, and remediation recommendations.
• Conduct follow‑up validation to confirm that identified security weaknesses have been addressed.
• Support the development of automated security control testing and continuous validation workflows.
• Prepare technical reports and executive summaries covering defensive readiness, control effectiveness, and residual risks.
• Provide technical guidance and knowledge sharing to security analysts, detection engineers, and incident responders.

Qualifications and Experience

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related discipline.
• Significant professional experience in purple teaming, security validation, penetration testing, detection engineering, or security operations.
• Strong understanding of offensive and defensive cybersecurity methodologies.
• Practical knowledge of the MITRE ATT&CK framework and adversary simulation techniques.
• Experience evaluating endpoint detection and response, extended detection and response, SIEM, and network security platforms.
• Understanding of common attack techniques involving identity systems, endpoints, networks, cloud environments, and web applications.
• Experience developing or reviewing detection rules, correlation logic, alert thresholds, and security monitoring use cases.
• Familiarity with security testing and simulation tools such as Atomic Red Team, Caldera, Prelude Operator, or comparable platforms.
• Knowledge of incident response processes, threat hunting methodologies, and security control assessment.
• Ability to analyze logs, security telemetry, and attack simulation results to identify defensive gaps.
• Experience documenting technical findings and presenting remediation recommendations to different stakeholder groups.
• Understanding of cybersecurity governance, risk management, and authorized testing procedures.
• Strong analytical, investigative, and problem‑solving skills.
• Excellent technical writing and cross‑functional communication abilities.
• Ability to manage complex security validation projects independently in a fully remote environment.

What We Offer

• 100% remote working arrangement from within the applicable employment jurisdiction.
• Competitive compensation aligned with experience and cybersecurity expertise.
• Opportunities to contribute to advanced security validation and cyber resilience initiatives.
• Professional development in adversary simulation, detection engineering, and emerging security technologies.
• Collaboration with international cybersecurity, engineering, and threat intelligence teams.