Purple Teamer with Focus Detection Engineering (m/w/d)

Description:
Hunter in the Shadows – with Code and Cleverness

Understanding attackers, uncovering their traces—and making sure they get caught next time: That’s your mission as a Purple Teamer at glueckkanja.
Whether it’s Entra ID, Windows, or Active Directory—you dissect complex attack paths, replicate them in our lab environment, and develop precise detections using KQL. Together with our Blue Team, you bring your expertise directly into the field, ensuring that cyberattacks are not only detected but also understood and reliably defended against.

Ready to make a difference as the link between offense and defense?
Then join glueckkanja now as a

Purple Teamer with a focus on Detection Engineering (m/f/d)

What you can achieve with us ::
• You research new attack vectors in Entra ID, Windows, and Active Directory.
• You stay informed about emerging threats through the internet, conferences, and internal communities, and replicate these attacks in our lab environment.
• Together with our Blue Team, you regularly develop new detections using Defender, Sentinel, and KQL to identify the attack patterns you've executed.
• You help us operationalize and automate these attack patterns to ensure the created detections are regularly tested and validated.

How you fit best to us ::
• Red or Purple Team expertise in Entra ID, Windows, and Active Directory—or a strong interest in diving deeper into these areas
• Passion for researching new security vulnerabilities
• Interest in simulating and operationalizing cyberattacks
• Basic knowledge of KQL to translate executed attack patterns into detections for our CSOC
• Optional experience with Azure and M365 services

Why you should join us::
• At glueckkanja, you're not just close to the Microsoft source—you also benefit from a level of Microsoft expertise that few other IT consulting firms in Germany can offer.
• All Microsoft doors are open to you here, and you’ll have regular opportunities to grow in key areas.
• Even if you’re not quite there yet—we’ll help you become the expert we need, as long as you bring the right skills.
• We give you access to global expert communities and the opportunity to participate in Cloud Architect trainings (Level 300+).
• You’ll enjoy not only an attractive salary and a wide range of benefits—like a smartphone and notebook of your choice—but also the flexibility to plan your working hours.
• You can work remotely from anywhere in Germany or join us in one of our modern and stylish offices, such as our headquarters in Offenbach, our large office in Deggendorf, or our regional office in Hamburg.
• You’ll work with top-tier clients like DB Schenker, Fuchs, Enercon, Stabilus, Uniper, and Freudenberg.
• And our outstanding kununu ratings speak for themselves.

Fancy all that?:
We look forward to receiving your CV, which you can easily upload using the button provided. Please make sure to review our privacy policy when submitting personal data.

See you soon—maybe!