Senior Purple Team Engineer

🕒 July 18

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

KOHO

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2014

💼 Consulting

🛡️ Insurance

💳 Fintech

Consulting • Insurance • Fintech

KOHO is a financial technology company that provides Canadians with tools to manage their money effectively and enhance their lifestyle. Offering a single platform, KOHO allows users to spend smarter with a prepaid Mastercard that offers up to 5% cash back, grow their savings with competitive interest rates, facilitate borrowing with easy cash advances, and build credit history. The app also features budgeting tools, payment splitting, and various customizable plans to suit individual needs, emphasizing convenience and financial wellness for its users.

📋 Description

• Own and lead incident response readiness across KOHO. • Plan and execute adversarial simulations: scope engagements, operate within defined rules of engagement, conduct offensive operations, and deliver findings that drive measurable security improvements. • Expand incident response readiness across KOHO and build response playbooks for marketing, data, legal, people & culture, risk, etc. • Conduct table top exercises with c-level to test risk acceptance and limitations. • Document lessons learned, operational improvements, and playbook updates. Execute all improvements. • Lead incident response/DFIR during a cybersecurity incident. • Conduct post incident documentation to determine contributing factors and lessons learned. • Design and deploy internal deception assets to detect lateral movement, insider threats, and unauthorized access across KOHO's environment. • Build external-facing deception capabilities, including fake credentials, canary tokens embedded in customer-facing surfaces, and decoy infrastructure seeded in breach databases and other attacker-accessible surfaces. • Instrument deception assets to generate actionable threat intelligence and feed findings back into detection logic, playbooks, and the broader threat model. • Build the triage and response workflow for deception-triggered alerts into existing SOC operations, from signal to investigation to lessons learned.

🎯 Requirements

• Bachelor’s degree in computer science, technology management, or related technical or management field. • You are a self-starter who can build programs from the ground up and build operations. • Hands on experience and working understanding of AWS. • Experience designing and deploying deception programs covering both internal detection assets and external-facing deception infrastructure. • Strong knowledge in MITRE ATT&CK and cyber kill chain. • Hands-on experience planning and executing adversarial simulations, including scoping engagements, defining rules of engagement, and delivering post-engagement reporting. • Experience operating offensive security tooling and techniques to emulate real-world threat actor behaviour.

🏖️ Benefits

• Competitive compensation & equity • Generous vacation + Wellness days + Flex Days + holiday closure • Remote-first environment + coworking support + yearly all hands retreat • Access to coaching & growth programs • Parental top-up & leave policies • Comprehensive health benefits • Power-up budgets for books, home office setup, phone & internet, AI tools, and professional development