Purple Teaming Engineer - Embedded Security

Role Overview

Purple Teaming Engineer - Embedded Security at Lucid Motors. The role is based at Lucid Motors locations globally.

Company Overview

Lucid creates exceptional mobility experiences through innovation and proprietary technology, designing and building award-winning vehicles that combine performance, sustainability, design, and engineering. The company operates with deep vertical integration, with design, engineering, and production happening in-house across global offices and manufacturing facilities.

Role Purpose

Execute threat emulation and adversary simulation exercises across embedded and cloud-connected systems to enhance detection capabilities and SOC effectiveness. Play a key role in operationalizing Purple Team activities, identifying detection gaps, and improving security logging practices in collaboration with Red and Blue teams.

Key Responsibilities

Attack Simulation & Threat Emulation

• Operationalize Purple Team and Attack Simulation exercises across embedded and cloud-connected systems.
• Develop and execute adversary simulation plans that align with threat intelligence.
• Support offensive testing across RTOS, Linux, Android, and MCU-based systems.
• Work closely with SOC and Red teams to convert threat intelligence into actionable TTPs and test cases.
• Support SOC operations and help validate detection logic with real-world simulations.

Detection Engineering & Log Analysis

• Identify relevant log sources across assets, ECUs, and infrastructure; document the type, location, and format of logs required for effective cybersecurity anomaly detection.
• Regularly review the availability, completeness, and integrity of logs; highlight gaps and work with asset and ECU owners to ensure alignment with best security logging practices.
• Share recommendations with system and asset owners on required logging improvements, event visibility, and adherence to secure logging practices.
• Assist in control validation, SIEM optimization, and threat modeling automation.

Collaboration & Stakeholder Management

• Collaborate with Red and Blue teams to identify detection gaps and improve SOC effectiveness.
• Draft and present technical reports and summaries of Purple Team activities to technical and management stakeholders.
• Communicate findings, detecting weaknesses, meeting the logging requirements, and prioritized remediation strategies.
• Provide mentorship to junior team members on simulation workflows and embedded systems.
• Contribute to the ongoing development of the team's offensive and defensive testing capabilities.

Qualifications & Experience

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, or Information Technology.
• At least 5 years of professional experience.
• 3–6 years of combined experience in Red Teaming, SOC, detection engineering, or embedded security testing.
• Strong knowledge of MITRE ATT&CK, threat simulation tools, and detection principles.
• Experience working with embedded Linux, Android systems, RTOS, or MCU platforms.
• Familiarity with SIEM systems such as Splunk or ELK.
• Exposure to network security, including packet analysis and custom protocol fuzzing.
• Exposure to vehicle communications including CAN, UDS, DoIP, BLE, MQTT, and similar protocols.

Skills & Competencies

• Proficiency in scripting and automation using Python.
• Log analysis capabilities.
• Strong technical writing and communication skills for documentation and stakeholder engagement.
• Familiarity with tools such as Burp Suite, Ghidra, Binwalk, or custom fuzzers (preferred).
• Experience simulating or detecting low-level attacks, including firmware tampering, memory corruption, and secure boot bypasses (preferred).
• Understanding of cloud security architecture related to embedded platforms (preferred).
• Working knowledge of SIEM solutions, telemetry pipelines, and threat hunting frameworks (preferred).
• Experience in vehicle cybersecurity, SOC, or embedded threat detection (preferred).

Additional Information

Lucid offers a comprehensive and competitive benefits package including medical, dental, and vision insurance; life and disability coverage; paid time off; paid holidays; paid sick leave; and a 401(k) retirement plan. Hourly non-exempt employees accrue up to 120 hours paid time off, and salaried exempt employees accrue up to 160 hours paid time off. Eligible employees may participate in Lucid's equity program and/or a discretionary annual cash incentive program. Incentive and equity awards, if applicable, are determined based on individual performance, role scope, market considerations, and overall company results, in accordance with the terms of the applicable plans. Lucid Motors is an equal opportunity employer committed to providing an inclusive workplace for all qualified applicants without regard to race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity or expression, marital status, or any other characteristic protected by applicable state or federal laws and regulations. Lucid Motors is committed to providing reasonable accommodations for qualified individuals with disabilities.