Senior Purple Team Operator: Offensive & Defensive Security

Ally-Financial; North Carolina; Hybrid; USD 110,000 - 180,000; Full time

Job summary

Ally Financial is seeking a Principal of Cyber Security to lead advanced security initiatives within the Information Protection and Risk Management program. The role requires strong technical depth, collaboration with IT and business leaders, and the ability to guide risk-based decisions to protect enterprise assets.

The position emphasizes threat analysis, policy enforcement, audits, and security testing, with a focus on scalable processes and clear communication to stakeholders across the

Qualifications

• Minimum 7+ years of cybersecurity experience.
• Minimum 5 years in offensive security or red teaming.
• Experience with enterprise-grade BAS solutions.
• Experience with MITRE ATT&CK Navigator and SIEM products.
• Excellent communication and presentation skills; ability to convey complex concepts.

Responsibilities

• Collaborate with Director of Security Operations to align security program with business needs.
• Analyze threat landscape and provide risk assessments to leadership.
• Identify process improvements to close gaps with minimal management intervention.
• Monitor compliance with security policies and enforce standards in IT.
• Lead responses to security audits and regulatory findings.
• Provide security awareness and training for diverse audiences.
• Coordinate with vendors, legal, and purchasing on contracts and SLAs.
• Oversee incident management, vulnerability management, and remediation strategies.
• Design and oversee security testing and remediation of identified risks.

Skills

Cybersecurity

Offensive security

Red teaming

SIEM

Communication

Analytical

Problem-solving

Education

Bachelor's degree in CS/IT or similar

Tools

MITRE ATT&CK Navigator

Atomic Red Team

SIEM

Job description

Ally Financial is seeking a Principal of Cyber Security to lead advanced security initiatives within the Information Protection and Risk Management program. The role requires strong technical depth, collaboration with IT and business leaders, and the ability to guide risk-based decisions to protect enterprise assets.

The position emphasizes threat analysis, policy enforcement, audits, and security testing, with a focus on scalable processes and clear communication to stakeholders across the