Lead Purple Team Engineer: Cloud Security & Emulation

TENEX.AI; Missouri; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Benefits package

Growth opportunities

Job summary

TENEX.AI is hiring a Lead Security Engineer to join the Adversary Research Team and bridge offense with defense by emulating real adversaries, measuring detection efficacy, and feeding gaps back into detection engineering and SOC workflows.

You will emulate attacked techniques, design detections for high-risk areas, and report results to leadership while collaborating with a cross-functional team to improve security operations and incident response.

Qualifications

• 7+ years in offensive security, detection engineering, or a blend of the two with hands-on purple team or adversary emulation experience.
• Strong red-side skills: adversary tradecraft, C2, evasion, and emulation planning.
• Strong blue-side skills: writing/detecting telemetry across endpoint, network, and cloud in SIEM/EDR.
• Ability to measure detection effectiveness and communicate results clearly.

Responsibilities

• Identify and address gaps in coverage; research and design detection use-cases; validate through testing.
• Develop detection strategies for high-risk technologies where research is thin.
• Track actors, malware, and tooling; dissect tradecraft for detection and emulation.
• Design and recreate real attacks to test and validate detections and controls.
• Develop reporting to show leadership and customers where defenses stand.

Skills

Adversary emulation

Detection engineering

Purple team

Telemetry analysis

Education

Bachelor's degree in CS/Cybersecurity/Engineering

Tools

Caldera

Atomic Red Team

Prelude

Scythe

Job description

TENEX.AI is hiring a Lead Security Engineer to join the Adversary Research Team and bridge offense with defense by emulating real adversaries, measuring detection efficacy, and feeding gaps back into detection engineering and SOC workflows.

You will emulate attacked techniques, design detections for high-risk areas, and report results to leadership while collaborating with a cross-functional team to improve security operations and incident response.