Cybersecurity Detection Engineer / Purple Team

About the Company Act Digital is an international technology and cybersecurity consulting company supporting major organizations across digital transformation, cyber defense and security operations. Within our cybersecurity activities, we support large enterprise and financial-sector clients on topics including: Detection engineering SOC operations Incident response Offensive security Purple teaming Threat-driven defense improvement We are currently looking for a Detection Engineer to join a major financial-sector environment in Montreal. About the Role As a Detection Engineer, you will help improve and validate cybersecurity detection capabilities against modern attacker techniques. This role combines detection engineering, purple teaming and offensive validation activities. The objective is not only to create detections, but also to continuously test and improve their effectiveness against realistic attack scenarios. You will work closely with SOC, Incident Response and Security Engineering teams to strengthen detection coverage and defensive maturity across the environment. Main responsibilities include: Reviewing and improving existing detection use cases Developing new detection logic and behavioral analytics Validating detections through offensive testing and adversary simulation Identifying detection gaps across endpoint, identity, network and cloud environments Simulating attacker techniques mapped to MITRE ATT&CK Improving detection quality and reducing false positives Supporting continuous improvement of monitoring and response capabilities Qualifications 3+ years of experience in cybersecurity Experience in Detection Engineering, Threat Detection, SOC or Purple Teaming Hands-on experience with offensive security techniques or adversary simulation Experience working in enterprise or regulated environments Strong understanding of modern attack techniques and intrusion methodologies Required Skills SIEM and EDR technologies Detection use case development and tuning MITRE ATT&CK framework Log analysis and event correlation Threat detection methodologies Offensive security fundamentals Scripting skills (Python, PowerShell and/or Bash) Windows security and Active Directory knowledge Strong analytical and investigation capabilities Preferred Skills Experience in financial or highly regulated environments Experience with purple teaming or adversary simulation Experience with detection-as-code methodologies Knowledge of threat hunting methodologies Familiarity with Windows internals, Active Directory and cloud environments Knowledge of modern attack chains, lateral movement and privilege escalation techniques

Develop and validate cybersecurity detection capabilities using behavioral analytics and offensive testing. Collaborate with SOC and Incident Response teams to reduce false positives and close detection gaps across various environments.

Requires over 3 years of experience in cybersecurity with a focus on detection engineering or purple teaming. Candidates must be proficient in SIEM/EDR technologies, scripting, and modern attack methodologies.

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• SIEM
• EDR
• Detection Use Case Development
• MITRE ATT&CK
• Log Analysis
• Event Correlation
• Offensive Security
• Python
• PowerShell
• Bash
• Windows Security
• Active Directory
• Purple Teaming
• Adversary Simulation
• Threat Hunting
• Detection-as-Code

• Security & Safety
• Technology
• Consulting
• Software
• Engineering

Expérience minimale

3+ ans

Postuler avant le

27 août 2026

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Niveau d’expérience

Associate

Mode de candidature

La candidature directe est offerte