Threat Emulation Engineer - Blue/Purple Team

The role

A Threat Emulation Engineer will support service delivery and act as a product subject-matter expert. You will lead complex Automated Security Validation deployments and partner with customers to address security use cases.

What you will do

• Complete internal training for Automated Security Validation (ASV).
• Lead complex ASV deployments and partner with customers to address diverse security use cases.
• Assess customer security posture and requirements to guide solution design.
• Maximize ASV value by enabling customers and supporting their cybersecurity strategy.
• Collaborate with internal product and technical teams to deliver solutions and drive innovation.
• Apply prior experience, share best practices, and develop creative approaches to increase adoption.
• Empower customers to independently address future security questions.

Required qualifications

• Active Top Secret/SCI clearance with a CI Poly within 10 years
• 5–10 years of security systems engineering and troubleshooting experience
• Active DoD 8570 IAT Level II+ certification (e.g., Security+, CEH)
• Strong understanding of cyber threat techniques, intelligence analysis, and adversary TTPs
• Familiarity with MITRE ATT&CK and similar threat frameworks
• Experience designing log ingestion and aggregation strategies
• Knowledge of key security events across common IT platforms
• Proficiency with Windows, macOS, and Linux systems
• Experience with networking and security troubleshooting (firewalls, routing, NAT, etc.)
• Ability to manage and deliver multiple projects independently
• Embraces emerging technologies, including AI tools

Nice to have

• Bachelor’s degree in a relevant field or equivalent experience
• Experience configuring and utilizing enterprise SIEM platforms
• Understanding of OS auditing (Syslog, Windows Event Logs)
• Experience with Mandiant Security Validation or other Breach and Attack Simulation (BAS) tools
• Red or purple team experience
• Experience developing SOC runbooks, workflows, and policy documentation
• Familiarity with various scripting languages (bash, python, powershell, perl)

Benefits

• Group Medical Insurance options
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

Before you apply

• Must have an active Top Secret/SCI clearance with a CI Poly within 10 years
• Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. The company serves as a trusted advisor to more than 6,200 customers.