Senior Purple Team Validation Specialist
Abu Dhabi, UAE/Dubai
Listed on 2026-11-04
-
IT/Tech
Cybersecurity, Security Management & Operations
Job Title:
Senior Purple Team Validation Specialist
Location: United Arab Emirates (Remote)
Employment Type: Full-Time
Work Arrangement: 100% Remote – Work From Home
Level: Senior
About the RoleWe are seeking a Senior Purple Team Validation Specialist to strengthen organizational cybersecurity through coordinated offensive and defensive security validation. The role focuses on evaluating security controls, validating threat detection capabilities, assessing incident response effectiveness, and translating adversary simulation findings into practical security improvements.
The successful candidate will work closely with red teams, blue teams, security operations, threat intelligence, and infrastructure teams to identify defensive gaps and improve the organization's ability to detect, investigate, and respond to realistic cyber threats. All activities will be conducted remotely within formally approved testing environments and authorized scopes.
Key Responsibilities- Lead purple team validation exercises to assess the effectiveness of cybersecurity controls and defensive monitoring capabilities.
- Coordinate controlled adversary simulations based on relevant threat intelligence and recognized attack frameworks.
- Develop validation scenarios aligned with MITRE ATT&CK tactics, techniques, and procedures.
- Evaluate security detection rules, endpoint monitoring, network defenses, identity controls, and security information and event management platforms.
- Validate whether simulated attack behaviors generate appropriate alerts and investigation opportunities.
- Collaborate with red team and blue team professionals to reproduce attack scenarios and assess defensive responses.
- Analyze detection gaps, alert quality, response delays, and security control weaknesses.
- Review security telemetry, endpoint logs, network events, authentication records, and incident investigation evidence.
- Assess the effectiveness of security monitoring and incident response playbooks.
- Recommend improvements to detection engineering, threat hunting, alert correlation, and response procedures.
- Develop repeatable validation test cases, assessment criteria, and measurable performance indicators.
- Document exercise objectives, approved testing boundaries, execution results, and remediation recommendations.
- Conduct follow‑up validation to confirm that identified security weaknesses have been addressed.
- Support the development of automated security control testing and continuous validation workflows.
- Prepare technical reports and executive summaries covering defensive readiness, control effectiveness, and residual risks.
- Provide technical guidance and knowledge sharing to security analysts, detection engineers, and incident responders.
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Digital Forensics, or a related discipline.
- Significant professional experience in purple teaming, security validation, penetration testing, detection engineering, or security operations.
- Strong understanding of offensive and defensive cybersecurity methodologies.
- Practical knowledge of the MITRE ATT&CK framework and adversary simulation techniques.
- Experience evaluating endpoint detection and response, extended detection and response, SIEM, and network security platforms.
- Understanding of common attack techniques involving identity systems, endpoints, networks, cloud environments, and web applications.
- Experience developing or reviewing detection rules, correlation logic, alert thresholds, and security monitoring use cases.
- Familiarity with security testing and simulation tools such as Atomic Red Team, Caldera, Prelude Operator, or comparable platforms.
- Knowledge of incident response processes, threat hunting methodologies,…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).