Purple Team Engineer – Risk & Exposure Management

Department Overview

The Purple Team Engineer – Risk & Exposure Management focuses on prioritizing, quantifying, and managing cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact. This role ensures the organization focuses remediation and defense efforts on the risks that matter most, not just individual findings.

The engineer acts as a bridge between technical security teams and risk leadership, translating adversary behavior into measurable business exposure.

Key Responsibilities

Analyze and correlate data from:

Vulnerability management platforms

Red team and purple team exercises

Threat intelligence and exploit trends

Attack surface management tools

Identify and prioritize real-world exploitable risks rather than theoretical vulnerabilities

Model attack paths and exposure scenarios across:

Identity

Cloud environments

Network and endpoint assets

Partner with Red and Blue teams to:

Assess likelihood and impact of attack techniques

Align technical findings to enterprise risk tolerance

Support risk scoring and reporting frameworks (e.g., CVSS + exploitability + business context)

Communicate risk posture to:

Security leadership

GRC and compliance teams

Engineering and infrastructure owners

Track remediation progress and residual risk

Influence security investments based on risk reduction outcomes

Required Qualifications

5–8+ years of experience in security operations, threat modeling, or risk management

Strong understanding of:

Adversary tradecraft (MITRE ATT&CK)

Vulnerability management and exploit lifecycles

Security control impact on risk reduction

Experience translating technical security findings into business risk

Strong analytical and communication skills

Preferred Qualifications

Experience with:

Attack surface management or breach and attack simulation tools

Risk quantification models (FAIR or similar)

Cloud risk management (AWS, Azure, GCP)

Background in purple teaming, red teaming, or detection engineering

Certifications such as CISSP, CRISC, GCIH, or threat-focused credentials

Why Join Cardinal Health?

• Work for a Fortune 20 healthcare leader impacting millions of lives.
• Be part of a rapidly growing cybersecurity organization.
• Solve meaningful security challenges at global enterprise scale.
• Learn from experienced security leaders and technical experts.
• Access continuous learning, mentorship, and career development opportunities.
• Thrive in a collaborative, supportive, and innovation-driven culture.

Join us in securing the future of healthcare while building a rewarding and impactful career.

Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.

Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.

To read and review this privacy notice click here