Senior Purple Team Engineer

KOHO · Remote · KOHO (CAN) ·
Fully remoteFull-timeSenior5+ years
COMPENSATION
€•• – ••k
0 applicants so far

Listed on the employer's job board (Ashby)

  • Senior level role
  • Fully remote (Canada)
  • Incident Response focus
  • Deception Engineering
  • AWS environment

Join KOHO as a Senior Purple Team Engineer to strengthen cyber resilience through proactive testing and incident preparedness. You will design deception assets, conduct adversarial simulations, and guide the organization during security incidents, reporting to the Senior Manager of Product Security.

What you'll do

  • Lead incident response readiness and conduct regular tabletop exercises
  • Plan and execute adversarial simulations with defined rules of engagement
  • Build response playbooks for non-technical teams like marketing and legal
  • Serve as incident commander or support during cybersecurity incidents
  • Design and deploy internal deception assets such as honeypots and canary tokens
  • Create external-facing deception capabilities including fake credentials
  • Integrate deception alerts into SOC operations for threat intelligence

What you'll need

  • Bachelor’s degree in computer science or related technical field
  • Hands-on experience and working understanding of AWS
  • Experience designing and deploying deception programs internally and externally
  • Strong knowledge of MITRE ATT&CK framework and cyber kill chain
  • Proven ability to plan and execute adversarial simulations
  • Experience using offensive security tooling to emulate threat actors
  • Self-starter capable of building programs and operations from scratch

Stack

  • AWS
  • MITRE ATT&CK
  • Honeypots
  • Canary tokens
  • DFIR tools

How you'll work

  • Fully remote position based in Canada
  • Asynchronous collaboration with flexible hours
  • Remote-first culture built on autonomy and trust

What you get

  • Competitive salary range of $160,000 - $190,000 CAD per year
  • Pay transparency and internal equity focus
  • Work-life integration prioritized over traditional balance