RemoteLeaf Logo
Log in Sign up

Senior Purple Operations Engineer

1 month, 1 week ago
Europe
Full-time
Senior
Security Engineer
DevOps and Infrastructure
Azure Bash Cloudflare Confluence GitHub GitLab JIRA Kubernetes Lucene PowerShell Python SIEM SOC
Apply Now
Sporty Group

Sporty Group

Sporty Group is a global consumer internet and media organization that specializes in digital and linear sports broadcasting, offering its leading free-to-air platform, SportyTV, which engages millions of users across multiple countries and continents.

Media
51-250
Founded 2013
View All Jobs 36

Description

  • Tune EDR, SIEM, and XDR detections to reduce false positives and improve alert quality.
  • Build and maintain detection rules, correlation searches, dashboards, watchlists, and response workflows.
  • Translate Red Team, Purple Team, incident, and threat intelligence findings into repeatable defensive checks.
  • Validate EDR policies, prevention rules, logging, sensor health, and response actions.
  • Review noisy alerts and tune thresholds, exclusions, lookups, entity context, and suppression logic.
  • Support SOC analysts with clear alert descriptions, triage steps, severity logic, and escalation guidance.
  • Improve log coverage, parsing, field normalization, enrichment, and data quality.
  • Map detections to MITRE ATT&CK where useful.
  • Write portable detection content using formats such as Sigma.
  • Track detection gaps, false positive trends, alert health, and platform performance.

Requirements

  • Experience tuning EDR, SIEM, XDR, or SOC monitoring platforms.
  • Strong understanding of endpoint, identity, cloud, network, and web attack behaviors.
  • Practical experience writing detection logic in KQL, SPL, EQL, Lucene, Sigma, YARA, or similar.
  • Familiarity with MITRE ATT&CK mapping and detection coverage analysis.
  • Ability to turn Red Team, Purple Team, and incident findings into clear detection logic.
  • Experience reducing false positives through rule tuning, exceptions, automation, and better entity context.
  • Strong scripting ability in Python, PowerShell, Bash, or similar.
  • Good understanding of SOC workflows, incident triage, escalation, and response playbooks.
  • Strong documentation skills.
  • Experience with any of the following technologies: Microsoft Defender XDR, CrowdStrike Falcon, SentinelOne, Microsoft Sentinel, Splunk Enterprise Security, Elastic Security, Google SecOps, Sigma, YARA, KQL, SPL, EQL, Lucene, Python, PowerShell, Bash, MITRE ATT&CK, Atomic Red Team, Caldera, Vectr, TheHive, Jira, Confluence, GitHub, GitLab, osquery, Sysmon, Zeek, Suricata, AWS CloudTrail, GuardDuty, Azure, Entra ID, Google Workspace, Okta, Cloudflare, Kubernetes logs.

Benefits

  • Remote-first work environment.
  • Competitive salary with individual performance-based quarterly bonuses.
  • 28 days of paid annual leave.
  • Core working hours from 10am-3pm in your local time zone, with flexibility outside those hours.
  • Referral bonuses and flash bonuses.
  • Top-of-the-line equipment.
  • Annual company retreats with networking opportunities.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Keywords Studios

Active Directory / Identity Engineer

Keywords Studios 10K-50K Internet Software & Services

Keywords Group is seeking an experienced Active Directory SME and Azure Identity Lead to guide company-wide identity architecture and support global IT across on-premises and cloud environments.

United Kingdom Full-time Lead Security Engineer
Active Directory Cybersecurity DHCP DNS PowerShell
14 hours, 3 minutes ago
Klaviyo

Senior Security Compliance Engineer

Klaviyo 1K-5K IT Services

Klaviyo is seeking a Senior Security Compliance Engineer to help its Security Trust & Risk team automate and scale compliance operations, continuous monitoring, and GRC tooling across a fast-growing AI-first B2C CRM platform.

United States Full-time Senior Security Engineer
$120k-$180k
AWS CI/CD Go HIPAA Kubernetes Python REST API SQL
14 hours, 48 minutes ago
PetDesk

Website Security Engineer

PetDesk 51-250 Health Care Providers & Services

PetDesk is hiring a Website Security Specialist to protect its website portfolio by preventing vulnerabilities, responding to incidents, and maintaining secure technical operations across the full site lifecycle.

Sri Lanka Contract Junior Security Engineer
WordPress
14 hours, 48 minutes ago
Zscaler

Principal AI Security Specialist - Federal

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a Principal AI Security Specialist to lead field-facing enterprise AI security engagements, helping Fortune 500 customers adopt GenAI securely across complex sales cycles.

United States Full-time Lead AI (Artificial Intelligence) Security Engineer
$176k-$251k
Cybersecurity Generative AI LLM
1 day, 13 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers