Purple Team Lead/Sr Vulnerability Assessment Analyst

Role Description

:

The Purple Team Lead / Senior Penetration Tester is responsible for planning, coordinating, and executing advanced Purple Team operations that integrate offensive security testing with defensive validation in support of an Army contract This role conducts authorized adversary emulation and penetration testing to assess the effectiveness of cybersecurity controls, improve detection capabilities, and strengthen the organization's overall security posture.

Key responsibilities:

• Lead and execute Purple Team engagements that combine offensive penetration testing with real-time defensive monitoring and response validation.
• Plan and conduct Computer Defense Assistance Program (CDAP) missions, including Network Assistance Visits (NAV), Network Damage Assessments (NDA), and Persistent Penetration Testing (PPT).
• Perform authorized network, application, and infrastructure penetration testing to identify security weaknesses and validate defensive controls.
• Simulate real-world adversary tactics, techniques, and procedures (TTPs) to assess detection, response, and recovery capabilities.
• Collaborate closely with Blue Team, Cyber Threat Intelligence (CTI), and incident response personnel to validate security monitoring, detection rules, and response procedures.
• Develop detailed technical findings, risk assessments, and remediation recommendations following each assessment.
• Ensure all testing activities are conducted in accordance with approved Rules of Engagement (ROE), Army regulations, and applicable DoD cybersecurity policies.
• Mentor junior cybersecurity personnel and contribute to the continuous improvement of Purple Team methodologies, tools, and operational procedures.

Qualifications:

Clearance Level: Secret

Education: N/A

Certifications:

• Desired certifications: CISSP, CASP+ or CCNP

Experience:

• 7+ years experience leading penetration testing, Red Team, or Purple Team operations within DoD or federal environments.
• Strong understanding of offensive security methodologies, adversary emulation, and penetration testing frameworks.
• Experience with network, web application, Active Directory, cloud, and endpoint security assessments.
• Knowledge of MITRE ATT&CK, NIST Cybersecurity Framework, and DoD cyber operations.
• Familiarity with common penetration testing and security assessment tools (e.g., Cobalt Strike, Metasploit, Burp Suite, Nmap, BloodHound, Impacket, Kali Linux).