Purple Team Engineer – Retesting & Control Validation

Cardinal Health; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Benefits offered by this job

Global enterprise scale

Career development

Mentorship programs

Inclusive culture

Job summary

Cardinal Health is seeking a Purple Team Engineer – Retesting & Control Validation to validate security controls and detection capabilities across endpoints, networks, cloud, and identity systems. You will retest vulnerabilities, simulate adversary techniques, and ensure remediation reduces real-world risk.

Join a global healthcare leader focused on secure, scalable solutions. The role collaborates with blue teams and SOC, emphasizes thorough documentation, and delivers clear validation for

Qualifications

• 5 to 8+ years of experience in offensive security, defensive security, or purple teaming.
• Hands-on experience with vulnerability retesting and validation.
• Experience with penetration testing tools like Metasploit, Burp Suite, Nuclei, Cobalt Strike.
• Knowledge of MITRE ATT&CK techniques and adversary simulation.
• Strong understanding of endpoint, network, cloud, and identity security controls.

Responsibilities

• Perform retesting of vulnerabilities identified through penetration tests and red team exercises.
• Validate the effectiveness of security controls, detection rules, and alerting logic.
• Reproduce real-world attack techniques aligned with MITRE ATT&CK to confirm remediation.
• Collaborate with the blue team and SOC to tune detections and reduce false negatives.
• Provide clear validation sign-off for remediation efforts and document methodology and residual risk.

Skills

Offensive security

Defensive security

Purple teaming

MITRE ATT&CK

Tools

Metasploit

Burp Suite

Nuclei

Cobalt Strike

Job description

Company Overview

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25

Company Overview

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25

About Cardinal Health International India (CHII)

Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges.

Department Overview

The Purple Team Engineer – Retesting & Control Validation is responsible for validating the effectiveness of security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises, penetration tests, vulnerability assessments, and blue team findings. This role ensures that remediation actions are not only implemented, but actually reduce risk and prevent real-world exploitation.

Job Overview

Perform retesting of vulnerabilities identified through:

• Penetration tests and red team exercises
• Purple team engagements
• Internal and third-party security assessments

Validate Effectiveness Of

• Security control fixes
• Detection rules and alerting logic
• Preventive and detective measures (EDR, SIEM, NDR, WAF, IAM, etc.)

Reproduce Real-world Attack Techniques (MITRE ATT&CK-aligned) To Confirm

• Exploits are no longer viable
• Lateral movement paths are closed
• Privilege escalation has been prevented

Collaborate With Blue Team And SOC To

• Confirm alerts trigger as expected
• Tune detections and reduce false negatives
• Document retesting methodology, results, and residual risk
• Provide clear validation sign-off for remediation efforts
• Support continuous improvement of purple team exercises and testing frameworks

Required Qualifications

• 5 to 8 + years of experience in offensive security, defensive security, or purple teaming

Hands-on Experience With

• Vulnerability retesting and validation
• Penetration testing tools (e.g., Metasploit, Burp Suite, Nuclei, Cobalt Strike equivalents)
• MITRE ATT&CK techniques and adversary simulation

Strong Understanding Of

• Endpoint, network, cloud, and identity security controls
• Exploitation chains and kill-chain analysis
• Ability to clearly document technical findings and outcomes

Preferred Qualifications

• Experience with CI/CD or continuous security testing
• Familiarity with detection engineering or SIEM use case testing
• Industry certifications (OSCP, CRTO, GXPN, GCED, or similar)
• Scripting skills (Python, PowerShell, Bash)

Success Metrics

• Percentage of remediations successfully validated
• Reduction in repeat findings
• Improved detection coverage and response accuracy
• Clear validation reporting for leadership and audit teams

Why Join Cardinal Health?

• Work for a Fortune 20 healthcare leader impacting millions of lives.
• Be part of a rapidly growing cybersecurity organization.
• Solve meaningful security challenges at global enterprise scale.
• Learn from experienced security leaders and technical experts.
• Access continuous learning, mentorship, and career development opportunities.
• Thrive in a collaborative, supportive, and innovation-driven culture.

Join us in securing the future of healthcare while building a rewarding and impactful career.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.