Senior Purple Team Engineer

The role

You will lead incident response readiness and build a deception engineering program from the ground up. This includes conducting adversarial simulations and deploying internal and external deception assets to generate threat intelligence.

What you will do

• Own and lead incident response readiness across KOHO.
• Conduct regular tabletop exercises and playbook reviews.
• Plan and execute adversarial simulations.
• Expand incident response readiness and build response playbooks for various departments.
• Conduct tabletop exercises with c-level to test risk acceptance and limitations.
• Document and execute lessons learned and operational improvements.
• Lead incident response/DFIR during a cybersecurity incident.
• Design and deploy internal deception assets.
• Build external-facing deception capabilities.
• Instrument deception assets to generate threat intelligence.

Required qualifications

• Bachelor’s degree in computer science, technology management, or related technical or management field.
• Self-starter who can build programs from the ground up and build operations.
• Hands on experience and working understanding of AWS.
• Experience designing and deploying deception programs covering both internal detection assets and external-facing deception infrastructure.
• Strong knowledge in MITRE ATT&CK and cyber kill chain.
• Hands-on experience planning and executing adversarial simulations, including scoping engagements, defining rules of engagement, and delivering post-engagement reporting.
• Experience operating offensive security tooling and techniques to emulate real-world threat actor behaviour.

Benefits

• Remote-first setup
• Asynchronous collaboration
• Flexible hours
• Work-life integration

About the company

KOHO is a performance organization on a mission to make financial services better for every Canadian through products designed to help users spend smart, save more, and build real wealth.