Purple Team Engineer – Retesting & Control Validation

Company Overview: Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25 About Cardinal Health International India (CHII) : Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges. Department Overview The Purple Team Engineer – Retesting & Control Validation is responsible for validating the effectiveness of security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises, penetration tests, vulnerability assessments, and blue team findings. This role ensures that remediation actions are not only implemented, but actually reduce risk and prevent real-world exploitation. The engineer works closely with Red Team, Blue Team, SOC, Engineering, and application owners to confirm security improvements through hands-on testing and continuous validation. Job Overview Perform retesting of vulnerabilities identified through: Penetration tests and red team exercises Purple team engagements Internal and third-party security assessments Validate effectiveness of: Security control fixes Detection rules and alerting logic Preventive and detective measures (EDR, SIEM, NDR, WAF, IAM, etc.) Reproduce real-world attack techniques (MITRE ATT&CK–aligned) to confirm: Exploits are no longer viable Lateral movement paths are closed Privilege escalation has been prevented Collaborate with Blue Team and SOC to: Confirm alerts trigger as expected Tune detections and reduce false negatives Document retesting methodology, results, and residual risk Provide clear validation sign-off for remediation efforts Support continuous improvement of purple team exercises and testing frameworks Required Qualifications 5 to 8 + years of experience in offensive security, defensive security, or purple teaming Hands-on experience with: Vulnerability retesting and validation Penetration testing tools (e.g., Metasploit, Burp Suite, Nuclei, Cobalt Strike equivalents) MITRE ATT&CK techniques and adversary simulation Strong understanding of: Endpoint, network, cloud, and identity security controls Exploitation chains and kill-chain analysis Ability to clearly document technical findings and outcomes Preferred Qualifications Experience with CI/CD or continuous security testing Familiarity with detection engineering or SIEM use case testing Industry certifications (OSCP, CRTO, GXPN, GCED, or similar) Scripting skills (Python, PowerShell, Bash) Success Metrics Percentage of remediations successfully validated Reduction in repeat findings Improved detection coverage and response accuracy Clear validation reporting for leadership and audit teams Why Join Cardinal Health? Work for a Fortune 20 healthcare leader impacting millions of lives. Be part of a rapidly growing cybersecurity organization. Solve meaningful security challenges at global enterprise scale. Learn from experienced security leaders and technical experts. Access continuous learning, mentorship, and career development opportunities. Thrive in a collaborative, supportive, and innovation-driven culture. Join us in securing the future of healthcare while building a rewarding and impactful career. Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply. Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law. To read and review this privacy notice click here Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a distributor of pharmaceuticals, a global manufacturer and distributor of medical and laboratory products, and a provider of performance and data solutions for healthcare facilities. We are a crucial link between the clinical and operational sides of healthcare, delivering end‑to‑end solutions and data‑driving insights that advance healthcare and improve lives every day. With deep partnerships, diverse perspectives and innovative digital solutions, we build connections across the continuum of care. With more than 50 years of experience, we seize the opportunity to address healthcare's most complicated challenges — now, and in the future. View Cardinal Health on YouTube