See how candidates think and approach the work this role demands, before the phone screen. We'll build a video challenge from this posting, and you can edit or share it before it goes live.
A healthcare giant is building a function that merges offensive red-team testing with defensive blue-team work and ranks risk by business impact rather than by individual vulnerability, suggesting a shift toward treating cyber exposure as a quantified enterprise risk.
Company Overview:
Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25
About Cardinal Health International India (CHII) :
Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges.
Department Overview
The Purple Team Engineer – Risk & Exposure Management focuses on prioritizing, quantifying, and managing cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact. This role ensures the organization focuses remediation and defense efforts on the risks that matter most, not just individual findings.
The engineer acts as a bridge between technical security teams and risk leadership, translating adversary behavior into measurable business exposure.
Key Responsibilities
Analyze and correlate data from:
Vulnerability management platforms
Red team and purple team exercises
Threat intelligence and exploit trends
Attack surface management tools
Identify and prioritize real-world exploitable risks rather than theoretical vulnerabilities
Model attack paths and exposure scenarios across:
Identity
Cloud environments
Network and endpoint assets
Partner with Red and Blue teams to:
Assess likelihood and impact of attack techniques
Align technical findings to enterprise risk tolerance
Support risk scoring and reporting frameworks (e.g., CVSS + exploitability + business context)
Communicate risk posture to:
Security leadership
GRC and compliance teams
Engineering and infrastructure owners
Track remediation progress and residual risk
Influence security investments based on risk reduction outcomes
Required Qualifications
5–8+ years of experience in security operations, threat modeling, or risk management
Strong understanding of:
Adversary tradecraft (MITRE ATT&CK)
Vulnerability management and exploit lifecycles
Security control impact on risk reduction
Experience translating technical security findings into business risk
Strong analytical and communication skills
Preferred Qualifications
Experience with:
Attack surface management or breach and attack simulation tools
Risk quantification models (FAIR or similar)
Cloud risk management (AWS, Azure, GCP)
Background in purple teaming, red teaming, or detection engineering
Certifications such as CISSP, CRISC, GCIH, or threat-focused credentials
Why Join Cardinal Health?
Join us in securing the future of healthcare while building a rewarding and impactful career.
Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.
To read and review this privacy notice click here
Answer a McCoy challenge. Companies hiring in engineering see your response and reach out when they want to talk.
About 15 minutes to prepare and 5 minutes to record. Unlimited retakes and a teleprompter help you answer. No AI training, and you can delete your response anytime.
This isn't an application to Cardinal Health.
cardinalhealth:20190509See how we measure for definitions, or our corrections log for known issues. Found something wrong? Flag a correction.
wd1|cardinalhealth|EXTThis posting hasn't been probed by our closure verifier yet. Stream C runs on a rolling schedule against postings approaching the close-decision threshold.