Purple Teaming Engineer Embedded Security📣 Job Ad

About the Role

Lucid Motors is seeking a Purple Teaming Engineer with a focus on embedded security. This full-time position is based in Riyadh and requires 5-10 years of experience. The role involves hands-on expertise in both offensive and defensive security practices, particularly within embedded systems.

Role Overview and Responsibilities

The Purple Teaming Engineer will play a crucial role in enhancing security posture through adversary simulation and detection engineering. This involves operationalizing purple team exercises, developing and executing adversary simulation plans aligned with threat intelligence, and collaborating with Red and SOC teams to identify and address detection gaps. A key responsibility includes identifying relevant log sources across assets, ECUs, and infrastructure, documenting logging requirements, and ensuring log availability, completeness, and integrity. Recommendations for logging improvements and adherence to secure logging practices will be shared with system and asset owners. The role also supports offensive testing across various embedded systems and involves drafting technical reports for stakeholders, communicating findings, and prioritizing remediation strategies.

Collaborative Objectives

This position requires close collaboration with SOC and Red teams to translate threat intelligence into actionable tactics, techniques, and procedures (TTPs) and test cases. The engineer will support SOC operations by validating detection logic through real-world simulations, assist in control validation, SIEM optimization, and threat modeling automation. Additionally, the role involves mentoring junior team members on simulation workflows and embedded systems, and contributing to the ongoing development of the team’s offensive and defensive testing capabilities.

Required Qualifications

• A Bachelor's Degree in Cybersecurity, Information Security, Computer Science, or Information Technology, with a minimum of 5 years of professional experience.
• 3–6 years of combined experience in Red Teaming, SOC operations, detection engineering, or embedded security testing.
• Strong understanding of MITRE ATT&CK framework, threat simulation tools, and detection principles.
• Experience working with embedded Linux, Android systems, RTOS, or MCU platforms.
• Familiarity with SIEM systems (*, Splunk, ELK) and log analysis.
• Proficiency in scripting and automation using Python.
• Exposure to network security concepts, including packet analysis and custom protocol fuzzing.
• Familiarity with vehicle communication protocols (CAN, UDS, DoIP, BLE, MQTT, etc.).
• Strong technical writing and communication skills for documentation and stakeholder engagement.

Preferred Qualifications

• Experience in vehicle cybersecurity/SOC or embedded threat detection.
• Familiarity with security tools such as Burp Suite, Ghidra, Binwalk, or custom fuzzers.
• Experience simulating or detecting low-level attacks, including firmware tampering, memory corruption, and secure boot bypasses.
• Understanding of cloud security architecture as it relates to embedded platforms.
• Working knowledge of SIEM solutions, telemetry pipelines, and threat hunting frameworks.