Cybersecurity Engineer – Purple Team / Red Team

Job Description / Functions

Are you passionate about offensive cybersecurity and interested in bringing real-world threat knowledge to the continuous improvement of a SOC?

We are looking for a Senior Cybersecurity / Purple Team Specialist to participate in international cybersecurity projects, working on Threat-Led Validation, Adversary Emulation, Red/Purple Team, Threat Hunting, and Detection Engineering. The selected person will help validate and improve detection, investigation, and response capabilities against threats, working on enterprise environments and Microsoft security technologies.

Functions:

• Design security exercises based on Threat Intelligence, recent incidents, business risks, and detection gaps.
• Plan and execute Adversary Emulation, Red Team, Purple Team, and Atomic Testing campaigns.
• Map adversary activities and behaviors to MITRE ATT&CK.
• Validate telemetry and detection capabilities together with the Detection Engineering and Threat Hunting teams.
• Create, review, and optimize KQL queries, correlation rules, and behavioral detections.
• Work with Microsoft Sentinel and Microsoft Defender XDR.
• Evaluate the end-to-end capability of the SOC to detect, enrich, investigate, escalate, contain, and document incidents.
• Identify blind spots, false negatives, and opportunities for improvement in security capabilities.
• Document evidence and perform root cause analysis.
• Define and follow up on remediation actions together with the control owners.
• Perform re-testing to verify that remediation measures have been correctly implemented.
• Create scripts, automations, integrations, and reusable tools.
• Work with Python, PowerShell, Bash, APIs, Git, and CI/CD.
• Prepare metrics and reporting on MITRE ATT&CK coverage, control effectiveness, detections, and remediation progress.
• Participate in Purple Team Workshops, After-Action Reviews, and knowledge transfer sessions.
• Contribute to the continuous improvement of the SOC's detection and response capabilities.

Education

• University degree in Cybersecurity, Computer Science, Engineering, or equivalent.
• A combination of specialized professional training and relevant experience in cybersecurity will be equally valued.

Minimum Requirements

• At least 3 years of practical experience in offensive cybersecurity, Adversary Emulation, Pentesting, Detection Engineering, Threat Hunting, Incident Response, or related disciplines.
• At least 3 years of practical experience in Red Team or Purple Team, including planning and executing exercises in enterprise environments.
• Demonstrable experience transforming offensive exercise results into improvements in telemetry, detection, investigation, response, and remediation.
• Experience working with MITRE ATT&CK and Threat Intelligence.
• Solid knowledge of attack and post-exploitation techniques in:
• Windows
• Linux
• Active Directory
• Microsoft Entra ID
• Microsoft 365
• Networks
• Cloud
• Experience with SIEM, EDR/XDR, SOAR, and Network Security Monitoring technologies.
• Experience with Microsoft Sentinel.
• Experience with Microsoft Defender XDR.
• Good knowledge of KQL (Kusto Query Language).
• Experience working with Python, PowerShell, or Bash.
• Knowledge of APIs, version control, and CI/CD environments.
• Ability to work in enterprise, distributed environments with multiple stakeholders.
• Ability to document technical results and convert them into concrete improvement actions.
• Autonomous, analytical, and results-oriented person.

Languages

• Professional English.

Location

Madrid

Why us?

A day off for your birthday so you can celebrate it however you want!

Improvements in paid leave for better personal and professional balance.

Access to private medical insurance for your peace of mind.

Extra vacation days according to your seniority, because we value your rest and well-being.

At Pasiona, we are committed to diversity and equal opportunity.

We encourage all people to apply, regardless of gender, age, disability, sexual orientation, gender identity, ethnic origin, religion, or other personal or social circumstances.