> Markdown version of [/jobs/ext/1387547-purple-team-lead-cloud-security-engineer](https://www.wearedevelopers.com/jobs/ext/1387547-purple-team-lead-cloud-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Purple Team - Lead Cloud Security Engineer

- **Company:** TENEX SECURITY, INC.
- **Location:** Sarasota, FL, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, Red Team (Cyber Security), Security Information and Event Management, Cyber Threat Analysis, Information Technology, Purple Team (Cyber Security), Epic Prelude
- **Published:** July 22, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ce860d7b313bb153

## About the Role

* 7+ years in offensive security, detection engineering, or a blend of the two, with hands-on purple team or adversary emulation experience.
 * Strong red-side skills: adversary tradecraft, command and control, evasion, and building emulation plans that reflect how real intrusions unfold.
 * Strong blue-side skills: writing and tuning detections and analyzing endpoint, network, and cloud telemetry in a SIEM or EDR.
 * Ability to measure detection effectiveness and communicate results clearly to engineers, analysts, and leadership., * Experience with emulation and purple team tooling (Caldera, Atomic Red Team, Prelude, Scythe, or similar).
 * Experience in an MDR/MSSP or high-growth startup environment.
 * Detection content development or threat-hunting background.

Education & Certifications:

 * Bachelor's degree in Computer Science, Cybersecurity, or Engineering, or a related field (or equivalent experience).
 * Relevant certifications such as OSCP, OSEP, CRTO, GIAC (GPEN, GCFA, or GCDA), or CISSP are a plus.

## Description

* Identify and address gaps. Find where coverage falls short, research and design detection use-cases to close it, and validate through testing where that is merited.
 * Detection engineering research. Where public detection research is thin or nonexistent, develop detection strategies from scratch for high-blast-radius technologies, crown-jewel systems, and areas of high risk or exposure.
 * Adversary research. Track the actors, malware, and tooling active against our customers' verticals, and dissect their tradecraft down to the behaviors that matter for detection and emulation.
 * Adversary emulation. Design and recreate real attacks to test and validate detections and controls. Use the outcomes to improve detections and tooling in customer environments.
 * Track and report results. Develop reporting that gives leadership and customers a straight answer on where our defenses stand.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Building Security Champions](https://www.wearedevelopers.com/magazine/87-building-security-champions)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)