Purple Team Engineer – Risk & Exposure Management

Cardinal Health; Dublin (OH); Presencial; USD 120.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Continuous learning

Mentorship

Career development opportunities

Descripción de la vacante

Cardinal Health is seeking a Purple Team Engineer in Risk & Exposure Management to prioritize and quantify cyber risk by correlating threat intel, vulnerabilities, attack paths, and business impact. You will bridge technical security and risk leadership while guiding remediation efforts on the most significant risks.

Join a global health care leader and influence security investments by translating adversary behavior into measurable enterprise risk.

Formación

• 5–8+ years of experience in security operations, threat modeling, or risk management.
• Strong understanding of MITRE ATT&CK, vulnerability lifecycles, and risk reduction.
• Ability to translate technical findings into business risk and communicate with leadership.

Responsabilidades

• Analyze data from vulnerability mgmt, red/purple team exercises, threat intel, and attack surface tools.
• Identify and prioritize real-world exploitable risks and model attack paths across identities, cloud, and networks.
• Partner with Red/Blue teams; assess likelihood and impact of attack techniques.
• Communicate risk posture to security leadership, GRC, and engineering teams; track remediation.

Conocimientos

Threat modeling

Vulnerability management

MITRE ATT&CK

Risk management

Data analysis

Communication

Security operations

Herramientas

Attack surface management tools

Breach & attack simulation tools

Descripción del empleo

## Purple Team Engineer – Risk & Exposure ManagementApplylocations: IND07time type: Full timeposted on: Posted Todayjob requisition id: 20184025Company Overview:Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25About Cardinal Health International India (CHII) :Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges. Department OverviewThe Purple Team Engineer – Risk & Exposure Management focuses on prioritizing, quantifying, and managing cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact. This role ensures the organization focuses remediation and defense efforts on the risks that matter most, not just individual findings.The engineer acts as a bridge between technical security teams and risk leadership, translating adversary behavior into measurable business exposure.Key ResponsibilitiesAnalyze and correlate data from:Vulnerability management platformsRed team and purple team exercisesThreat intelligence and exploit trendsAttack surface management toolsIdentify and prioritize real-world exploitable risks rather than theoretical vulnerabilitiesModel attack paths and exposure scenarios across:IdentityCloud environmentsNetwork and endpoint assetsPartner with Red and Blue teams to:Assess likelihood and impact of attack techniquesAlign technical findings to enterprise risk toleranceSupport risk scoring and reporting frameworks (e.g., CVSS + exploitability + business context)Communicate risk posture to:Security leadershipGRC and compliance teamsEngineering and infrastructure ownersTrack remediation progress and residual riskInfluence security investments based on risk reduction outcomesRequired Qualifications5–8+ years of experience in security operations, threat modeling, or risk managementStrong understanding of:Adversary tradecraft (MITRE ATT&CK)Vulnerability management and exploit lifecyclesSecurity control impact on risk reductionExperience translating technical security findings into business riskStrong analytical and communication skillsPreferred QualificationsExperience with:Attack surface management or breach and attack simulation toolsRisk quantification models (FAIR or similar)Cloud risk management (AWS, Azure, GCP)Background in purple teaming, red teaming, or detection engineeringCertifications such as CISSP, CRISC, GCIH, or threat-focused credentialsWhy Join Cardinal Health?* Work for a Fortune 20 healthcare leader impacting millions of lives.* Be part of a rapidly growing cybersecurity organization.* Solve meaningful security challenges at global enterprise scale.* Learn from experienced security leaders and technical experts.* Access continuous learning, mentorship, and career development opportunities.* Thrive in a collaborative, supportive, and innovation-driven culture.**Join us in securing the future of healthcare while building a rewarding and impactful career.***Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.**Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.*