Principal Purple Teamer
Mindbox Sp. z o.o.
⚲ Kraków
175–212 zł netto (+ VAT) / godz.
Opis stanowiska
Nasze wymagania: Proven experience in Purple Teaming, Penetration Testing, and Attack Simulation. Strong team leadership and stakeholder management skills. Expertise in vulnerability identification, exploit development, and security control bypass techniques. Knowledge of malware obfuscation, persistence, exfiltration, and evasion tactics. Experience with tooling, automation, and source code review. Excellent communication skills in English (written and spoken). Degree in a relevant field or equivalent experience (preferred). Mile widziane: Industry certifications (e.g., OSCP, OSCE, CREST, GIAC). Participation in the cybersecurity community and research initiatives O projekcie: Are you passionate about offensive security and eager to make a real impact in protecting one of the world’s leading financial institutions? This is your chance to join a Global Red Team and be part of our newly established Purple Team, working on cutting-edge security initiatives. As a Principal Purple Teamer, you will play a key role in Cybersecurity Research and Offensive Security (CROS), focusing on Continuous Purple Teaming, large-scale collaborative testing, and replaying attack paths used during Attack Simulations or Regulatory Threat-Led Penetration Tests (TLPTs). You will lead Purple Team assessments, research and execute Tactics, Techniques, and Procedures (TTPs), and collaborate with Red Team, Threat Intelligence, and Security Research teams. This role requires strong leadership, technical expertise, and the ability to engage with diverse stakeholders to minimize operational risk while driving innovation. Sounds like your kind of challenge? Zakres obowiązków: Lead and deliver Purple Team exercises across services to identify vulnerabilities and improve security posture. Collaborate with stakeholders to define objectives, scope engagements, and ensure risk is managed effectively. Research and develop attack simulations, leveraging real-world threat intelligence. Provide subject matter expertise to global teams and influence security strategy. Stay ahead of emerging threats, techniques, and tools used by adversaries. Drive innovation in security testing and automation. Note: Detailed project information will be shared during the recruitment process. Oferujemy: Flexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.) Hybrid work setup – 6 days per month in the office (Kraków) Collaborative team culture – work alongside experienced professionals eager to share knowledge Continuous development – access to training platforms and growth opportunities Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more High quality equipment – laptop and essential software provided