Purple Team Lead: Offensive Security & Threat Hunting

Capital One; Plano (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Comprehensive health benefits

Financial benefits

Support for total well-being

Job summary

A leading financial services company in Plano, Texas, is looking for a skilled professional to perform threat detection and incident response. The ideal candidate will have over 4 years of experience in information security, including expertise in threat hunting and log analysis. The role involves collaborating between technical and executive teams, researching threats, and building technical infrastructures. A high school diploma and relevant certifications are required, along with experience in cloud environments and scripting.

Qualifications

• At least 4 years of information security experience.
• At least 3 years in Threat Hunting or Detection Engineering in a cloud/hybrid environment.
• At least 2 years analyzing EDR telemetry and bypass techniques.
• 2+ years performing offensive security operations.
• 4+ years in threat detection engineering and forensics.

Responsibilities

• Deconstruct adversary simulation activities to identify control gaps.
• Perform advanced log event analysis using big data tools.
• Serve as a technical bridge between offensive and defensive stakeholders.
• Continuously research emerging threat behaviors.
• Build and maintain the technical infrastructure for Purple Team activities.

Skills

Threat detection

Log analysis

Information security

Scripting

Cloud environments

Education

High School Diploma, GED, or equivalent certification

Tools

Databricks

Spark

Job description

A leading financial services company in Plano, Texas, is looking for a skilled professional to perform threat detection and incident response. The ideal candidate will have over 4 years of experience in information security, including expertise in threat hunting and log analysis. The role involves collaborating between technical and executive teams, researching threats, and building technical infrastructures. A high school diploma and relevant certifications are required, along with experience in cloud environments and scripting.