Cybersecurity Detection Engineer / Purple Team

About the CompanyAct Digital is an international technology and cybersecurity consulting company supporting major organizations across digital transformation, cyber defense and security operations.Within our cybersecurity activities, we support large enterprise and financial-sector clients on topics including:Detection engineeringSOC operationsIncident responseOffensive securityPurple teamingThreat-driven defense improvementWe are currently looking for a Detection Engineer to join a major financial-sector environment in Montreal.About the RoleAs a Detection Engineer, you will help improve and validate cybersecurity detection capabilities against modern attacker techniques.This role combines detection engineering, purple teaming and offensive validation activities. The objective is not only to create detections, but also to continuously test and improve their effectiveness against realistic attack scenarios.You will work closely with SOC, Incident Response and Security Engineering teams to strengthen detection coverage and defensive maturity across the environment.Main responsibilities include:Reviewing and improving existing detection use casesDeveloping new detection logic and behavioral analyticsValidating detections through offensive testing and adversary simulationIdentifying detection gaps across endpoint, identity, network and cloud environmentsSimulating attacker techniques mapped to MITRE ATT&CKImproving detection quality and reducing false positivesSupporting continuous improvement of monitoring and response capabilitiesQualifications3+ years of experience in cybersecurityExperience in Detection Engineering, Threat Detection, SOC or Purple TeamingHands-on experience with offensive security techniques or adversary simulationExperience working in enterprise or regulated environmentsStrong understanding of modern attack techniques and intrusion methodologiesRequired SkillsSIEM and EDR technologiesDetection use case development and tuningMITRE ATT&CK frameworkLog analysis and event correlationThreat detection methodologiesOffensive security fundamentalsScripting skills (Python, PowerShell and/or Bash)Windows security and Active Directory knowledgeStrong analytical and investigation capabilitiesPreferred SkillsExperience in financial or highly regulated environmentsExperience with purple teaming or adversary simulationExperience with detection-as-code methodologiesKnowledge of threat hunting methodologiesFamiliarity with Windows internals, Active Directory and cloud environmentsKnowledge of modern attack chains, lateral movement and privilege escalation techniques