Purple Team Engineer – Retesting & Control Validation

Company Overview:

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25

About Cardinal Health International India (CHII) :

Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges. 

Department Overview

The Purple Team Engineer – Retesting & Control Validation is responsible for validating the effectiveness of security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises, penetration tests, vulnerability assessments, and blue team findings. This role ensures that remediation actions are not only implemented, but actually reduce risk and prevent real-world exploitation.

The engineer works closely with Red Team, Blue Team, SOC, Engineering, and application owners to confirm security improvements through hands-on testing and continuous validation.

Job Overview

Perform retesting of vulnerabilities identified through:

Penetration tests and red team exercises

Purple team engagements

Internal and third-party security assessments

Validate effectiveness of:

Security control fixes

Detection rules and alerting logic

Preventive and detective measures (EDR, SIEM, NDR, WAF, IAM, etc.)

Reproduce real-world attack techniques (MITRE ATT&CK–aligned) to confirm:

Exploits are no longer viable

Lateral movement paths are closed

Privilege escalation has been prevented

Collaborate with Blue Team and SOC to:

Confirm alerts trigger as expected

Tune detections and reduce false negatives

Document retesting methodology, results, and residual risk

Provide clear validation sign-off for remediation efforts

Support continuous improvement of purple team exercises and testing frameworks

Required Qualifications

5 to 8 + years of experience in offensive security, defensive security, or purple teaming

Hands-on experience with:

Vulnerability retesting and validation

Penetration testing tools (e.g., Metasploit, Burp Suite, Nuclei, Cobalt Strike equivalents)

MITRE ATT&CK techniques and adversary simulation

Strong understanding of:

Endpoint, network, cloud, and identity security controls

Exploitation chains and kill-chain analysis

Ability to clearly document technical findings and outcomes

Preferred Qualifications

Experience with CI/CD or continuous security testing

Familiarity with detection engineering or SIEM use case testing

Industry certifications (OSCP, CRTO, GXPN, GCED, or similar)

Scripting skills (Python, PowerShell, Bash)

Success Metrics

Percentage of remediations successfully validated

Reduction in repeat findings

Improved detection coverage and response accuracy

Clear validation reporting for leadership and audit teams

Why Join Cardinal Health?

• Work for a Fortune 20 healthcare leader impacting millions of lives.
• Be part of a rapidly growing cybersecurity organization.
• Solve meaningful security challenges at global enterprise scale.
• Learn from experienced security leaders and technical experts.
• Access continuous learning, mentorship, and career development opportunities.
• Thrive in a collaborative, supportive, and innovation-driven culture.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here