purple team engineer

Purple

<div>
 Purple is a digitally-native vertical brand with a mission to help people feel and live better through innovative comfort solutions. To us, comfort means more than great products, it means empowering every employee to feel comfortable being themselves. We believe your career at Purple will be a one-of-a-kind &ldquo;Career in Comfort&rdquo; because our workforce is one-of-a-kind. We are committed to a culture of collaboration where every voice is heard and understood. As an innovation company at our core, we believe a diversity workforce brings better insights, solutions and products and serves as the backbone to bettering our company. Join with us as we add to our team of exceptional individuals who will help us take over the world &mdash; one mattress at a time.
 
 
 
 Compensation
 
 
 
 The compensation target for this role is: $85,000 - $100,000
 
 
 
 Job Summary
 
 
 
 Purple is seeing an Art Director with 6+ years of graphic design experience and 2+ years of management experience. The Art Director will oversee the design side of the creative team and will work on brand and marketing assets. The Art Director will sit on the Brand Creative Team, and will work closely with our cross-functional partners (Marketing, Retail, Wholesale, etc.)
 
 
 The ideal candidate is creative, detail-oriented and organized, and has a strong portfolio filled with performance-driven design. They understand storytelling through creative and building a brand through design.
 
 
 
 Responsibilities
 
 
 
 
 Job Description
 
 
 
 <ul>
 <li>
 Partner with creative, marketing and other cross-functional teams to concept and create best-in-class assets for the brand
 </li>
 <li>
 Lead designers to develop new ways to communicate brand stories
 </li>
 <li>
 Lead in the design of essential brand assets such as packaging, signage, POP, etc.
 </li>
 <li>
 Support on photoshoots in close collaboration with Associate Creative Director and external agencies
 </li>
 <li>
 Coach &amp; mentor designers on their day-to-day work and overall career development
 </li>
 <li>
 Maintain and elevate the brand aesthetic across all touchpoints
 </li>
 <li>
 Consistently meet project deadlines
 </li>
 <li>
 Keep up with trends within the performance marketing industry and mattress and bedding category.
 
 
 </li>
 </ul>
 
 Required Skills
 
 
 
 <ul>
 <li>
 Mastery of Adobe Suite
 </li>
 <li>
 Proficiency with Figma
 </li>
 <li>
 Ability to understand brand standards and deliver consistent results
 </li>
 <li>
 Intentional design aesthetic and strong typographic skills
 </li>
 <li>
 Degree in Graphic Design or similar
 </li>
 <li>
 Experience creating marketing assets (in-house preferred)
 </li>
 <li>
 6-8 years of graphic design experience
 </li>
 <li>
 2-3 years of people management
 
 
 </li>
 </ul>
 
 CANDIDATES WHO DO NOT SUBMIT A PORTFOLIO WILL NOT BE CONSIDERED
 
 
 
 
 Physical Requirements
 
 
 
 Physical Activities may occasionally include:
 
 
 <ul>
 <li>
 Remaining in a stationary position, often standing, or sitting for prolonged periods.
 </li>
 <li>
 Adjusting or moving objects up to 15 pounds in all directions.
 
 
 </li>
 </ul>
 
 Physical Activities May Constantly Include
 
 
 
 <ul>
 <li>
 Communicating with others to exchange information.
 </li>
 <li>
 Repeating motions that may include the wrists, hands and/or fingers.
 
 
 </li>
 </ul>
 
 Environmental Conditions May Occasionally Include
 
 
 
 <ul>
 <li>
 Noisy environments
 
 
 </li>
 </ul>
 
 Benefits And Perks
 
 
 
 <ul>
 <li>
 Medical, Dental, Vision
 </li>
 <li>
 401(k) Match
 </li>
 <li>
 Flexible PTO
 </li>
 <li>
 Earn a Mattress
 </li>
 <li>
 Purple Swag
 </li>
 <li>
 Amazing Purple Products
 
 
 </li>
 </ul>
 
 WHY WORK AT PURPLE?
 
 
 
 <ul>
 <li>
 Make your mark: We value innovative thinking. At Purple, you will be empowered to bring your ideas to life as we work together to improve people&rsquo;s lives through comfort.
 </li>
 <li>
 Gain unique experience: Be a part of one of the fastest growing companies in Utah! The contributions you make will matter at Purple as the company continues to grow with you.
 </li>
 <li>
 Awesome culture: Join the tight-knit team at Purple and you can enjoy working alongside industry experts, making close friends, and annual employee appreciation events.
 
 
 </li>
 </ul>
 
 Purple provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
 
 
 
 
 This policy applies to all terms and conditions of employment.
 
 
 
 It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
</div>

Art Director (Remote)

Crescent Solutions Services

Position Overview:The Security Engineer, Platform &amp; Tooling owns the shared automation backbone that serves both security-operations teams (Red, Blue, Purple) and the product SDLC. The mandate is twofold:- Eliminate operational toil by building reliable pipelines for scans, telemetry, and evidence management.- Embed security into DevOps workflows (DevSecOps) so vulnerabilities are identified and remediated early.Responsibilities:CI/CD &amp; DevSecOps Automation- Integrate SAST (Semgrep), DAST (ZAP, Burp), and SCA scanners into GitHub/GitLab pipelines.- Enforce IaC and container-image checks (Terraform, CloudFormation, Dockerfile linters).- Publish build-stage security metrics (OWASP risk tags, pass/fail gates) to engineering dashboards.Offensive &amp; Defensive Tooling- Orchestrate bulk scans (ZAP, Nuclei, Semgrep) outside the SDLC for red-team engagements.- Parse SARIF/JSON outputs and route findings to DefectDojo and Jira with de-duplication logic.Telemetry Ingestion &amp; SIEM/XDR Pipelines- Maintain schemas, enrichment, and data-quality checks for Windows/M365, AWS, and Azure logs.- Monitor pipeline health via automated SLIs/SLOs; trigger self-healing routines where feasible.Reusable Artefact Curation- Standardise Nuclei templates, Burp/ZAP add-ons, Sigma rules, and threat-hunt notebooks.- Version and distribute through an internal registry; provide CLI tooling for one-command deployment.Lab &amp; Sandbox Infrastructure- Operate disposable AD forests, cloud sandboxes, and target containers for red/purple exercises.- Provide &ldquo;one-click&rdquo; Terraform/Ansible scripts that bootstrap environments in &lt; 15 minutes.Process Optimisation &amp; Practitioner UX- Conduct quarterly time-motion studies to locate manual pain points.- Produce concise documentation and in-tool help to maximise adoption by security analysts and developers.Metrics &amp; Continuous Improvement- Report KPIs (see below) to leadership; maintain a roadmap aligned with both Ops and SDLC priorities.Requirements:- Programming: Advanced proficiency in Python or Go for pipeline tooling and API integrations.- CI/CD &amp; DevOps: Demonstrable experience with Jenkins, GitHub Actions, GitLab CI, or Azure DevOps;familiarity with GitOps patterns.- Security Scanners &amp; Formats: Hands-on with ZAP, Semgrep, Nuclei, SARIF/JSON, CycloneDX, SBOMs.- Container &amp; Cloud: Docker/Kubernetes, plus AWS or Azure deployment experience; image-hardening andruntime-security controls.- Data Engineering: Log parsing, schema mapping, and streaming (Kafka, Kinesis, or equivalent).- IaC &amp; Configuration Management: Terraform, CloudFormation, Ansible, or similar.- Collaboration: Proven record of working with both software-engineering squads and security-operations teams,translating requirements into intuitive tooling.- Strong proficiency in both written and spoken English.- Adaptability to thrive in dynamic, fast-paced environments and remote work settings.- Effective team player with excellent collaboration and interpersonal skills.- Ability to perform under pressure with a positive attitude and a focus on team success.- Demonstrates high levels of responsibility, reliability, and accountability.- Willingness and ability to travel internationally when required.Nice-to-Haves- Experience with implementing OWASP DSOMM- GIAC Cloud Security Automation (GCSA)- HashiCorp Certified: Terraform Associate- Certified Kubernetes Administrator (CKA)- DevOps or DevSecOps-specific certifications (e.g., DSOE, CDP)What we offer:- Competitive Compensation: Enjoy a salary package tailored to your skills and experience- Comprehensive leave package- Top-Tier Equipment: Stay productive with the latest tools, including a MacBook and iPhone.- Thriving Culture: Immerse yourself in a dynamic, inclusive work environment that fosters growth.Pay: From AED10,000.00 per monthEducation:<ul><li>Bachelor's (Preferred)</li></ul>Experience:<ul><li>Programming in Python : 5 years (Preferred)</li><li>Go: 4 years (Preferred)</li><li>API integrations: 5 years (Preferred)</li><li>CI/CD: 5 years (Preferred)</li><li>DevOps: 5 years (Preferred)</li><li>Security Scanners ZAP, Semgrep, Nuclei (must be hands-on): 5 years (Preferred)</li><li>AWS or Azure : 4 years (Preferred)</li><li>IaC &amp; Configuration Management: Terraform, CloudFormation: 5 years (Preferred)</li></ul>Work Location: In person

Security Engineer, Platform & Tooling

Purple Cow Recruiting

<div>Description:
<div>
RN Nurse Manager | No Weekends | Leadership Role 
Full Time | Outpatient Leadership | Monday-Friday 
 
Elizabeth Banzhaf, LPN 
Co-Founder &amp; COO | Heartline Staffing 
Call or Text: 272-230-3157 
LinkedIn: View Elizabeth&rsquo;s LinkedIn 
Prefer a quick conversation instead of applying? Call or text Elizabeth directly at 272-230-3157. 
 
Heartline Staffing, in partnership with Purple Cow Recruiting, is hiring a Nurse Manager (RN) in Carlisle, Pennsylvania. 
 
POSITION OVERVIEW 
<ul><li>Outpatient Nurse Manager role overseeing medical support staff and clinic operations</li><li>Leadership-focused opportunity within stable community healthcare organization</li><li>Direct collaboration with clinical leadership to support operational consistency and quality care</li><li>Structured outpatient setting with established workflows and support staff</li><li>Opportunity to lead accountability, compliance, and team performance initiatives</li></ul> 

COMPENSATION 
<ul><li>Base Salary: $84,000 &ndash; $95,000</li><li>Relocation assistance up to $10,000</li></ul> 

SCHEDULE 
<ul><li>Monday through Friday schedule</li><li>Standard hours 8:00 AM &ndash; 5:00 PM</li><li>Wednesday late shift 9:00 AM &ndash; 7:30 PM</li><li>No weekends required</li><li>No call responsibilities</li></ul> 

ROLE 
<ul><li>Oversee outpatient medical support staff operations</li><li>Support clinic workflow efficiency and patient care delivery</li><li>Ensure compliance with policies, protocols, and operational standards</li><li>Collaborate with leadership to improve performance and accountability</li><li>Lead staff support, coordination, and operational consistency initiatives</li></ul> 

ENVIRONMENT 
<ul><li>Stable outpatient healthcare environment</li><li>Leadership-oriented clinical setting</li><li>Structured workflows and operational processes</li><li>Full support staff provided</li><li>Community-focused patient care organization</li></ul> 

BENEFITS 
<ul><li>Health insurance with employee contribution of $48.86 bi-weekly</li><li>Dental and vision insurance</li><li>Short-term and long-term disability coverage</li><li>23 PTO days in year one</li><li>9.5 paid holidays</li><li>Employer-paid life insurance up to $50,000</li><li>403(b) retirement plan with 2% employer match</li><li>$75 annual uniform allowance</li><li>Relocation assistance available</li></ul></div>
Requirements:
<ul><li>Active Pennsylvania Registered Nurse license REQUIRED</li><li>Minimum 5 years healthcare experience REQUIRED</li><li>Minimum 3 years management or supervisory experience REQUIRED</li><li>Family Medicine or Primary Care experience REQUIRED</li><li>Strong understanding of clinical workflows and policy implementation REQUIRED</li><li>Leadership and team accountability experience REQUIRED</li></ul> 
Not ready to formally apply? That is completely fine. Many candidates prefer a brief, confidential conversation first. You are welcome to call or text Elizabeth directly at 272-230-3157. 
 
Heartline Staffing is a Strategic Talent Partner with Purple Cow Recruiting. Applications are securely processed through Purple Cow Recruiting&rsquo;s system.</div>

RN Nurse Manager | No Weekends | Leadership Role

cFocus Software Incorporated

<div>Position Title 
Threat Emulation &amp; Readiness Lead / Red Team Lead 
Position Overview 
The Threat Emulation &amp; Readiness Lead will oversee adversary emulation, red team operations, cyber readiness exercises, and threat-informed defense initiatives supporting a federal enterprise cybersecurity program. 
The Lead will direct realistic adversary simulation activities aligned to nation-state tradecraft and MITRE ATT&amp;CK methodologies to assess and improve organizational detection, response, resilience, and operational readiness. 
Key Responsibilities<ul><li>
Lead red team operations and adversary emulation exercises.
</li><li>Design and execute:
<ul><li>threat emulation campaigns,
</li><li>purple team exercises,
</li><li>tabletop exercises,
</li><li>crisis simulations,
</li><li>and readiness drills.
</li></ul></li><li>Emulate advanced threat actor TTPs targeting enterprise, cloud, identity, and hybrid environments.
</li><li>Develop attack chains aligned to:
<ul><li>MITRE ATT&amp;CK,
</li><li>intelligence reporting,
</li><li>and real-world threat actor behaviors.
</li></ul></li><li>Coordinate closely with SOC, CTI, Threat Hunt, and Detection Engineering teams.
</li><li>Assess detection and response effectiveness across defensive technologies and operational workflows.
</li><li>Develop after-action reports, findings, remediation recommendations, and improvement roadmaps.
</li><li>Lead operational readiness assessments and continuous improvement initiatives.
</li><li>Brief executives and operational leadership on adversary risk and organizational readiness.
</li></ul>Required Qualifications<ul><li>
10+ years of offensive security or advanced cybersecurity operations experience.
</li><li>5+ years leading red team or adversary emulation operations.
</li><li>Experience conducting operations against:
<ul><li>enterprise Active Directory environments,
</li><li>cloud infrastructure,
</li><li>hybrid identity systems,
</li><li>and modern endpoint defenses.
</li></ul></li><li>Deep understanding of:
<ul><li>adversary tradecraft,
</li><li>post-exploitation,
</li><li>detection evasion,
</li><li>persistence,
</li><li>and lateral movement techniques.
</li></ul></li><li>Experience conducting purple team engagements and readiness exercises.
</li><li>Strong executive communication and briefing capabilities.
</li></ul>Preferred Certifications<ul><li>
OSCP
</li><li>OSEP
</li><li>CRTO
</li><li>GXPN
</li><li>GPEN
</li><li>CISSP
</li><li>MITRE ATT&amp;CK certifications</li></ul>
byKblLEwvK</div>

AOUSC - Threat Emulation & Readiness Lead / Red Team Lead

Cyber Force

<div>Cairo, Egypt Hybrid Full-time</div>
 <div><h2 class="jobSectionHeader">About Cyber Force</h2>

Cyber Force is a cybersecurity consultancy delivering advisory, managed services, and operations to international clients. Our senior-led teams combine governance, engineering, and 24&times;7 response to turn cyber risk into measurable resilience.
<h2 class="jobSectionHeader">
Role Overview</h2>

We are looking for a Mid-Level Penetration Tester to join our established Offensive Security &amp; Assurance practice. You will independently conduct web/API, network, mobile, and cloud penetration tests, participate in red team and adversary emulation engagements, and contribute to purple team exercises &mdash; delivering against international client engagements. You will work alongside an existing team of offensive security engineers and leverage AI-augmented tooling and LLM-based workflows.
<h2 class="jobSectionHeader">
Key Responsibilities</h2>
<ul><li>Independently plan and execute web application and API penetration tests (OWASP Top 10, ASVS)</li>
<li>Conduct network pen tests: external/internal, Active Directory and Entra ID attack-path analysis, privilege escalation, lateral movement</li>
<li>Perform mobile application security assessments (OWASP MASVS)</li>
<li>Execute cloud pen tests across AWS, Azure, and GCP</li>
<li>Participate in red team and adversary emulation engagements mapped to MITRE ATT&amp;CK</li>
<li>Contribute to purple team exercises with blue team / SOC</li>
<li>Conduct social engineering campaigns: phishing, pretexting, physical</li>
<li>Develop custom exploitation tools, scripts, and payloads</li>
<li>Produce pen test reports: executive summaries, technical findings, CVSS, remediation</li>
<li>Present findings to CISOs and technical teams</li>
<li>Leverage AI tools (Claude, ChatGPT) and agentic workflows for recon, exploit research, reporting</li>
<li>Mentor junior offensive security trainees</li>
</ul><h2 class="jobSectionHeader">Requirements</h2>
<ul><li>Bachelor&rsquo;s in CS, Cybersecurity, IT, or related (or equivalent practical experience)</li>
<li>2&ndash;4 years of hands-on penetration testing (web, network, + mobile/cloud/AD)</li>
<li>OSCP (Offensive Security Certified Professional) &mdash; required</li>
<li>Fluent English (written and spoken)</li>
<li>Core tools: Burp Suite Pro, Nmap, Metasploit, BloodHound, Cobalt Strike or C2, Kali Linux</li>
<li>Active Directory and Entra ID attack techniques</li>
<li>Web application security: OWASP Top 10, injection classes, SSRF, deserialization</li>
<li>Cloud security testing in AWS, Azure, or GCP</li>
<li>MITRE ATT&amp;CK mapping ability</li>
<li>Custom scripting: Python, Bash, or PowerShell</li>
<li>Demonstrated experience using LLM-based tools for offensive security tasks &mdash; this is a must</li>
<li>OSEP, OSWE, CRTO, GPEN, GXPN, or CPTS &mdash; a plus</li>
<li>VICI VCOP (Viridian Certified Offensive Operations Professional) &mdash; a plus</li>
<li>Bug bounty hall-of-fame or published CVEs &mdash; a plus</li>
<li>French language &mdash; a plus</li></ul></div>
 <div><h4 class="jobSectionHeader">Role details</h4>
<div>Location Cairo, Egypt
</div><div>Type Full-time
</div><div>Mode Hybrid</div></div>

Mid-Level Penetration Tester

INSPYR Solutions

<div>
 
 
 Title:
 
 &nbsp;Information Security - Offensive Security Analyst
 
 
 Location:
 
 Deerfield Beach, FL (Hybrid 3/2)
 
 
 Duration:
 
 Direct Hire&nbsp;
 
 
 Compensation:
 
 $100,000 - $110,000
 
 
 Work Requirements:
 
 US Citizen, GC Holders or Authorized to Work in the U.S.
 
 
 
 Information Security - Offensive Security Analyst
 
 
 
 Description
 
 
 
 The ideal candidate is someone with a strong software development or engineering background who is intentionally transitioning into the offensive security space. This role is well-suited for an individual who enjoys building systems, tooling, and automation, and wants to apply those skills to help design, scale, and modernize offensive security capabilities.
 
 
 Success in this role comes from thinking like both an engineer and an attacker &amp;mdash; identifying gaps not just in controls, but in how security capabilities themselves are constructed, integrated, and scaled.
 
 
 This role is responsible for building and scaling offensive security capabilities&nbsp;through adversary-focused testing, attack simulation, and custom tooling and automation. The analyst will help shift the program from a primarily tool- and vendor-driven model toward a build-first approach, leveraging software engineering, automation, and AI-assisted techniques to increase coverage, depth, and repeatability of offensive security activities.
 
 
 
 Responsibilities include but are not limited to
 
 
 <ul>
 <li>
 Conduct offensive security activities including penetration testing, attack simulations, threat-based assessments, and control validation across on-prem, cloud, identity, and SaaS environments.
 </li>
 <li>
 Execute and assist in the development of red team and purple team exercises, collaborating with detection and response teams to validate defensive coverage.
 </li>
 <li>
 Perform vulnerability and exploitation analysis, including chaining weaknesses to demonstrate real-world attack paths and business risk.
 </li>
 <li>
 Identify, validate, and responsibly disclose security weaknesses to stakeholders, providing clear remediation guidance and risk context.
 </li>
 <li>
 Design, develop, and maintain custom offensive security tooling (Python, PowerShell, Bash, or similar), including frameworks, reusable modules, and automation that scale testing beyond point-in-time assessments.
 </li>
 <li>
 Evaluate when to build versus buy offensive security capabilities, with a bias toward internal tooling where it improves flexibility, visibility, or speed of iteration.
 </li>
 <li>
 Incorporate AI-assisted techniques (e.g., automation, chaining analysis, signal prioritization) to increase testing efficiency and analyst leverage
 </li>
 <li>
 Contribute documentation such as test reports, playbooks, findings templates, and executive-level summaries.
 </li>
 <li>
 Contribute to the long-term architecture of the offensive security program, including shared libraries, testing pipelines, data models, and reporting outputs optimized for reuse and scale.
 </li>
 <li>
 Mentor junior analysts and contribute to team knowledge sharing.
 </li>
 <li>
 Partner with application and platform engineering teams not only to test systems, but to co-design secure patterns, reference implementations, and reusable testing components.
 </li>
 <li>
 Build developer-consumable assets (templates, scripts, sample exploits, safe test harnesses) that enable teams to self-validate security assumptions earlier in the SDLC.
 </li>
 <li>
 Provide developer-friendly remediation guidance, proof-of-concepts, and secure coding recommendations that are actionable and aligned to real-world development workflows.
 </li>
 <li>
 Support the integration and tuning of security testing tools within CI/CD pipelines, balancing detection depth with developer experience and signal quality.
 </li>
 <li>
 Collaborate with Security Engineering and Application teams to improve self-service security capabilities, documentation, and testing patterns that developers can reuse.
 </li>
 <li>
 Participate in post-testing debriefs with developers to educate, coach, and improve security outcomes&amp;mdash;not just report findings.
 </li>
 </ul>
 
 
 Desired Skills
 
 
 <ul>
 <li>
 Hands-on experience with penetration testing, red team, purple team, or adversary emulation activities.
 </li>
 <li>
 Strong understanding of Windows, Active Directory, Azure/Entra ID, networking, cloud platforms, and SaaS architectures.
 </li>
 <li>
 Experience with common offensive security tools and frameworks (e.g., C2 frameworks, vulnerability scanners, exploit frameworks).
 </li>
 <li>
 Knowledge of MITRE ATT&amp;CK, kill chains, and attacker tradecraft.
 </li>
 <li>
 Experience validating security controls such as EDR, SIEM, identity protections, email security, and cloud security controls.
 </li>
 <li>
 Strong scripting and automation skills; ability to customize or build tools to support testing objectives.
 </li>
 <li>
 Ability to translate technical findings into clear risk-based narratives for technical and non-technical audiences.
 </li>
 <li>
 Strong analytical, problem-solving, and critical-thinking skills.
 </li>
 <li>
 Ability to work independently while collaborating effectively in cross-functional teams.
 </li>
 <li>
 High attention to detail with a strong sense of ethics and responsible disclosure.
 </li>
 <li>
 Experience working directly with software engineers to remediate vulnerabilities and improve secure development practices.
 </li>
 <li>
 Understanding of modern SDLC and CI/CD pipelines, including how security testing fits into developer workflows.
 </li>
 <li>
 Familiarity with secure coding practices and common vulnerability classes in modern applications (web, APIs, cloud-native services).
 </li>
 <li>
 Ability to communicate security findings in a way that developers can quickly understand, prioritize, and fix.
 </li>
 <li>
 Mindset oriented toward enablement over enforcement, with a focus on reducing friction while improving security outcomes.
 </li>
 <li>
 Background in software engineering, platform engineering, or SRE, with a desire to specialize in security.
 </li>
 <li>
 Experience designing or maintaining production-quality code, not just scripts.
 </li>
 <li>
 Comfort working with APIs, data pipelines, CI/CD systems, and cloud-native services as part of security capability development.
 </li>
 <li>
 Curiosity and practical interest in applying AI/ML-assisted techniques to security testing, automation, and analysis.
 </li>
 </ul>
 
 
 About INSPYR Solutions
 
 
 &nbsp;
 
 Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.
 
 &nbsp;
 
 INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, INSPYR Solutions complies with applicable state and local laws governing nondiscrimination in employment in every location in which the company has facilities.
 
 &nbsp;
 
 #IND-TELECOM
 
 
 
 Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions&rsquo; Privacy Policy and INSPYR Solutions&rsquo; AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.
 
 
 
</div>

Information Security – Offensive Security Analyst

Grant Thornton - UAE

<div>
 
 
 We&rsquo;re a large and growing professional services firm that still feels like a community.&nbsp;With over 76,000 professionals in more than 150 countries, we combine global scale with local expertise to help dynamic organizations unlock their potential for growth.&nbsp;We truly care about our colleagues, our clients, and the communities where we work and live.
 
 
 As a Senior Consultant, you&rsquo;ll empower the team, deliver excellence, lead the way in shaping strategies and exceeding client expectations, and make a meaningful impact. Discover your purple and join our Business Risk Services Team today!&nbsp;
 
 
 
 Let us paint a picture for you
 
 
 
 Imagine being part of a team that puts &ldquo;we before me&rdquo;, where flexibility is a mindset, and where you trust your colleagues to have your back.
 
 
 Imagine working for an organization that believes in the power of authenticity in everything that we do. Whether you're steering discussions in a client meeting, tackling your fear of heights at the top of the Burj Khalifa or ziplining across Jebel Jais &ndash; bring your true self to work. Be a part&nbsp;of a team&nbsp;driven by a purpose of shaping the world that we live in, based on trust and integrity in markets, dynamic businesses, and communities where businesses and people thrive.
 
 
 Join us to expand your horizons, be inspired, face challenges, and most importantly, be yourself.
 
 
 
 About the Business Risk Services Line
 
 
 
 Discover tailored risk solutions with our BRS team. From proactive risk detection to optimizing internal controls, we empower your organization with strategies that drive efficiency and safeguard against threats. With a focus on transparency and collaboration, we build robust audit frameworks that ensure resilience and foster growth in an ever-changing business landscape.&nbsp;
 
 
 
 As a Senior Consultant some of your responsibilities will include:
 
 
 
 <ul>
 <li>
 Preparing draft terms of reference/audit planning document prior to meeting the client ensuring any&nbsp;revisions are processed
 </li>
 <li>
 Preparing business proposals and ensure timely submission to the line manager
 </li>
 <li>
 Producing close-out documentation and contributes to close-out meetings with the client
 </li>
 <li>
 Preparing fieldwork as applicable to review
 </li>
 <li>
 Responsible for building and maintaining good working relationships with all clients and colleagues
 </li>
 <li>
 Delivering internal audit service including devising strategic and annual internal audit plans on a risk-based approach
 </li>
 <li>
 Executing internal audit assignments independently to the required scope in compliance with risk based internal audit methodology including Plant Operations, Plant Maintenance, Asset Integrity, HSE, Projects (FEED to EPC), Engineering, Supply Chain Management, Well Integrity, Reservoir Engineering, Drilling Operations, Material Management, Logistics etc.
 </li>
 <li>
 Field management responsibilities including completing file reviews and preparing reports for review by assistant manager and engagement manager
 </li>
 <li>
 Planning and supervision of audits assigned to junior colleagues, including leading planning and exit meetings
 </li>
 <li>
 Reporting to Audit Committees on progress and key performance indicators against plan
 </li>
 <li>
 Preparing reports and presentations for assigned projects
 </li>
 <li>
 Formulating recommendations and solutions with attention to a client&rsquo;s wishes, capabilities and limitations forming concise reports
 </li>
 <li>
 Assisting the client in implementing the plan and resolve any occasional discrepancies
 </li>
 <li>
 Assisting in Financial Management including billing and income collection, compilation of profitability budgets and management of financial review process to achieve target internal profit measures
 </li>
 </ul>
 
 
 
 Think you've got what it takes to be a Senior Consultant? Like the color purple? Great. Here's a few more boxes we're also hoping you can tick:
 
 
 
 <ul>
 <li>
 3+ years of experience in Internal Audit / Risk Management within the Oil &amp; Gas, Power, Utility or Energy industry is essential
 </li>
 <li>
 Bachelor&rsquo;s or master&rsquo;s degree in an engineering field is essential
 </li>
 <li>
 Qualified level candidate of professional qualification or pursuing (CIA, CISA, CISM, CISP or equivalent)
 </li>
 <li>
 Certification in data analytics is preferred (Power BI, MS azure, AWS, google certifications)&nbsp;
 </li>
 <li>
 Internationally recognized Certifications in the in the technical areas such as Sustainability, HSE, process safety, Energy Risk Management etc..
 </li>
 <li>
 Internal audit experience in technical areas such as operations, maintenance, capital projects, supply chain, asset integrity, HSE, process safety, reservoir engineering, drilling operations, sustainability, etc. is essential
 </li>
 <li>
 Experienced in the use of data analytics, with a track record of successful use of the tool
 </li>
 <li>
 Excellent interpersonal skills, able to work to tight deadlines, self-motivated and detail &ndash; focused
 </li>
 <li>
 Ideally with experience of both practice and industry, including delivering internal audit services to a portfolio of clients/ stakeholders
 </li>
 <li>
 Experience of both financial and operational audits
 </li>
 <li>
 Experience of supervising small teams on assignment
 </li>
 <li>
 Experience of preparing and delivering presentations&nbsp;
 </li>
 <li>
 Excellent communication skills in both written and spoken Arabic is advantageous
 </li>
 </ul>
 
 
 .
 
 
</div>

Senior Consultant | Engineering Background - Internal Audit | Business Risk Services

Search 10000+ Purple team engineer jobs near you this May. New roles added regularly across leading industries. Apply today.