Purple Operations Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Tune EDR, SIEM, and XDR detections to reduce false positives and improve alert quality across endpoint, identity, cloud, network, and application telemetry. Build and maintain correlation rules, dashboards, watchlists, and response workflows, translating Red Team/Purple Team and Threat Intelligence findings into repeatable defensive checks. Validate detection reliability and sensor health, improve log coverage and data quality, and map detections to MITRE ATT&CK to track gaps and alert health.

Location: EMEA

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Tune EDR, SIEM, and XDR detections to reduce false positives and improve alert quality.
•Build and maintain detection rules, correlation searches, dashboards, watchlists, and response workflows.
•Translate Red Team, Purple Team, incident, and Threat Intelligence findings into repeatable defensive checks.
•Validate EDR policies, prevention rules, logging, sensor health, and response actions are working as expected.
•Review noisy alerts and improve thresholds, exclusions, lookups, entity context, suppression logic, and data quality.

Pay and Benefits

Perks:Paid Leave

Key Requirements

•Experience tuning EDR, SIEM, XDR, or SOC monitoring platforms.
•Strong understanding of endpoint, identity, cloud, network, and web attack behaviors.
•Hands-on detection engineering experience writing detection logic in KQL, SPL, EQL, Lucene, Sigma, YARA, or similar.
•Experience reducing false positives via rule tuning, exceptions, automation, and improved entity context.
•Ability to translate Red Team, Purple Team, and incident findings into clear detection logic and workflows.

Experience:SOC

Skills:Documentation skillsTriageCollaborationAttention to detailIncident response mindset

Languages:English

Tech Stack:Microsoft Defender XDRCrowdStrike FalconSentinelOneMicrosoft SentinelSplunk Enterprise SecurityElastic SecurityGoogle SecOpsSigmaYARAKQLSPLEQLLucenePythonPowerShellBashMITRE ATT&CKAtomic Red TeamCalderaVectr

Company Brief

Sporty Group

Operates an online retail platform offering sports apparel, equipment, and accessories across multiple sports categories, targeting consumers and amateur athletes with a range of brands and direct-to-consumer products.

Industry: E-commerce

Website

Loading job details...

Preparing the role view and application actions.

Sporty Group

4 weeks ago

Purple Operations Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: EMEA

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Tune EDR, SIEM, and XDR detections to reduce false positives and improve alert quality.
•Build and maintain detection rules, correlation searches, dashboards, watchlists, and response workflows.
•Translate Red Team, Purple Team, incident, and Threat Intelligence findings into repeatable defensive checks.
•Validate EDR policies, prevention rules, logging, sensor health, and response actions are working as expected.
•Review noisy alerts and improve thresholds, exclusions, lookups, entity context, suppression logic, and data quality.

Pay and Benefits

Perks:Paid Leave

Key Requirements

•Experience tuning EDR, SIEM, XDR, or SOC monitoring platforms.
•Strong understanding of endpoint, identity, cloud, network, and web attack behaviors.
•Hands-on detection engineering experience writing detection logic in KQL, SPL, EQL, Lucene, Sigma, YARA, or similar.
•Experience reducing false positives via rule tuning, exceptions, automation, and improved entity context.
•Ability to translate Red Team, Purple Team, and incident findings into clear detection logic and workflows.

Experience:SOC

Skills:Documentation skillsTriageCollaborationAttention to detailIncident response mindset

Languages:English

Company Brief

Sporty Group

Industry: E-commerce

Website