Purple Team Engineer: Risk & Exposure Orchestrator

Cardinal Health; Dublin (OH); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Continuous learning

Mentorship

Career development opportunities

Job summary

Cardinal Health is seeking a Purple Team Engineer in Risk & Exposure Management to prioritize and quantify cyber risk by correlating threat intel, vulnerabilities, attack paths, and business impact. You will bridge technical security and risk leadership while guiding remediation efforts on the most significant risks.

Join a global health care leader and influence security investments by translating adversary behavior into measurable enterprise risk.

Qualifications

• 5–8+ years of experience in security operations, threat modeling, or risk management.
• Strong understanding of MITRE ATT&CK, vulnerability lifecycles, and risk reduction.
• Ability to translate technical findings into business risk and communicate with leadership.

Responsibilities

• Analyze data from vulnerability mgmt, red/purple team exercises, threat intel, and attack surface tools.
• Identify and prioritize real-world exploitable risks and model attack paths across identities, cloud, and networks.
• Partner with Red/Blue teams; assess likelihood and impact of attack techniques.
• Communicate risk posture to security leadership, GRC, and engineering teams; track remediation.

Skills

Threat modeling

Vulnerability management

MITRE ATT&CK

Risk management

Data analysis

Communication

Security operations

Tools

Attack surface management tools

Breach & attack simulation tools

Job description

Cardinal Health is seeking a Purple Team Engineer in Risk & Exposure Management to prioritize and quantify cyber risk by correlating threat intel, vulnerabilities, attack paths, and business impact. You will bridge technical security and risk leadership while guiding remediation efforts on the most significant risks.

Join a global health care leader and influence security investments by translating adversary behavior into measurable enterprise risk.