GuidePoint Security
Threat Emulation Engineer - Blue/Purple Team
About this role
GuidePoint Security seeks a Threat Emulation Engineer to lead automated security validation deployments for federal clients, assess customer security posture, and guide customers through complex threat emulation scenarios. The role combines independent project work with large-scale enterprise deployments, emphasizing vendor-neutral security engineering and continuous skill development.
What you'll do
- Complete internal training on Automated Security Validation (ASV) tools and methodologies
- Lead ASV deployments and partner with customers to address diverse security use cases
- Assess customer security posture and requirements to guide solution design
- Collaborate with internal product and technical teams to deliver innovative solutions
- Enable customer independence by developing runbooks, workflows, and supporting their cybersecurity strategy
- Apply security expertise and best practices to increase ASV adoption and maximize customer value
What they're looking for
- Automated Security Validation and Breach & Attack Simulation (BAS) tools
- MITRE ATT&CK framework and threat modeling
- SIEM platforms and log aggregation/ingestion design
- Windows, macOS, and Linux systems administration
- Networking and security troubleshooting (firewalls, routing, NAT)
- Scripting languages (bash, python, powershell, perl)
- OS auditing and security event analysis
- Red/purple team methodologies and threat emulation techniques
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
GuidePoint Security
GuidePoint Security builds and deploys security infrastructure and automation solutions for federal government, intelligence community, and enterprise clients. The company is hiring for specialized security engineering roles including cloud security architects, network security engineers, Linux automation specialists, and security operations professionals with expertise in platforms like Splunk, Zscaler, and firewall technologies.
View all jobs at GuidePoint SecurityLikely interview questions
- Describe your experience designing and implementing log ingestion and SIEM strategies. How would you approach understanding key security events across a heterogeneous environment?
- Tell us about a time you led a complex security deployment with a customer. How did you identify their needs and ensure they could operate independently afterward?