Cybersecurity Adversarial Validation Engineer

Assurity Trusted Solutions Pte Ltd

. Plan and execute adversary emulation engagements mapped to MITRE ATT&CK and aligned to realistic customer-relevant threat actors .

Posted 10/24/2026full-timeSingapore • SingaporeMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in adversary emulation and detection engineering, with a strong focus on the MITRE ATT&CK framework and practical experience in red teaming and purple teaming. Proficient in authoring detection rules and collaborating with security teams to enhance detection capabilities and operational effectiveness.

Highest-signal resume keywords

Adversary EmulationMITRE ATT&CK FrameworkDetection EngineeringSIEM Rule AuthoringPurple Team Facilitation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Adversary EmulationDetection EngineeringRed Team OperationsNetworkingWindowsLinuxActive DirectoryScripting in PythonScripting in PowerShellScripting in Bash

Soft Skills

Clear CommunicationClient-Facing Report WritingStrong EthicsDisciplineSafety-First Mindset

Tools & Technologies

SIEM PlatformsSigmaEQLKQLSPLDeTT&CTAtomic Red TeamAWSAzureGCP

Certifications & Qualifications

OSCPCRTOOSEPGCIHGCFAGCDAGDATMITRE ATT&CK Purple Teaming Methodology

Industry Keywords

Purple TeamingThreat IntelligenceDetection-as-CodeAdversary TrackingTelemetry

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformKubernetesLinuxPython

About the role

Key responsibilities & impact

Plan and execute adversary emulation engagements mapped to MITRE ATT&CK and aligned to realistic customer-relevant threat actors
Run purple team exercises, observe telemetry, and iterate in real time with customer defenders
Validate preventive, detective, and response controls against emulated TTPs
Document execution evidence, timelines, and outcomes for technical and executive audiences
Convert emulation results into actionable detection gaps, hypotheses, and coverage maps
Author, tune, and validate detection rules in customer SIEM and detection platforms
Build high-fidelity detections with clear rationale and test cases
Create detection-as-code artifacts and validation tests, including Sigma rules, unit tests, and ATT&CK coverage heat maps
Collaborate with customer detection and SOC teams to deploy, measure, and iterate on detections
Support scoping, rules of engagement, deconfliction, and safety/containment planning
Produce prioritized findings and remediation guidance for technical teams and leadership
Present results in readouts and workshops and facilitate knowledge transfer to customer defenders
Contribute to internal methodology, tooling, playbooks, and reusable emulation/detection content

Requirements

What you’ll need

Experience in offensive security, red teaming, purple teaming, detection engineering, or a closely related discipline
Solid, hands-on understanding of the MITRE ATT&CK framework and the ability to map activity to techniques
Practical experience executing adversary emulation or red team operations end to end
Working knowledge of Networking, Windows, Linux and Active Directory attack paths and the telemetry they generate
Experience authoring or tuning detection rules in at least one major SIEM/detection platform
Clear written and verbal communication, including client-facing report writing and readouts
Strong ethics, discipline, and a safety-first mindset for operating in production customer environments
Relevant certifications such as OSCP, CRTO, OSEP, GCIH, GCFA, GCDA, GDAT, or equivalent demonstrable skills (preferred)
MITRE ATT&CK Purple Teaming Methodology certification (preferred)
Detection engineering experience with Sigma, EQL/KQL/SPL, detection-as-code pipelines, and ATT&CK coverage tooling such as DeTT&CT and Atomic Red Team (preferred)
Familiarity with cloud (AWS/Azure/GCP) and container/Kubernetes attack and detection surfaces (preferred)
Experience with threat intelligence-driven emulation and adversary tracking (preferred)
Purple team facilitation experience and comfort leading live exercises with defenders (preferred)
Scripting/automation skills in Python, PowerShell, and Bash (preferred)
Applied knowledge of AI/LLM models to improve detection engineering outcomes (advantageous)

Benefits

Comp & perks

A wholly-owned subsidiary of GovTech
We promote a learning culture and encourage you to grow and learn
Contract Staff enjoys the same benefits as Permanent Employees