Company Overview:
Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 48,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500 , America's Most Innovative Companies #51,Fortune Sector Leaders : Health Care #5 with a $223 billion. of revenue in FY25
About Cardinal Health International India (CHII) :
Cardinal Health International India (CHII) is part of the Cardinal Heath Global Technology and Business Services ( GTBS) team. CHII leverages technology to offer scalable and healthcare solutions to enhance efficiency and improve quality of care across the value chain. Our vision is to build a world class capability center that is an intersection of tech-innovation and learning, empowering our people to build solutions which will solve healthcare’s most complex challenges.
Department Overview
The Purple Team Engineer – Retesting & Control Validation is responsible for validating the effectiveness of security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises, penetration tests, vulnerability assessments, and blue team findings. This role ensures that remediation actions are not only implemented, but actually reduce risk and prevent real-world exploitation.
The engineer works closely with Red Team, Blue Team, SOC, Engineering, and application owners to confirm security improvements through hands-on testing and continuous validation.
Job Overview
Perform retesting of vulnerabilities identified through:
Penetration tests and red team exercises
Purple team engagements
Internal and third-party security assessments
Validate effectiveness of:
Security control fixes
Detection rules and alerting logic
Preventive and detective measures (EDR, SIEM, NDR, WAF, IAM, etc.)
Reproduce real-world attack techniques (MITRE ATT&CK–aligned) to confirm:
Exploits are no longer viable
Lateral movement paths are closed
Privilege escalation has been prevented
Collaborate with Blue Team and SOC to:
Confirm alerts trigger as expected
Tune detections and reduce false negatives
Document retesting methodology, results, and residual risk
Provide clear validation sign-off for remediation efforts
Support continuous improvement of purple team exercises and testing frameworks
Required Qualifications
5 to 8 + years of experience in offensive security, defensive security, or purple teaming
Hands-on experience with:
Vulnerability retesting and validation
Penetration testing tools (e.g., Metasploit, Burp Suite, Nuclei, Cobalt Strike equivalents)
MITRE ATT&CK techniques and adversary simulation
Strong understanding of:
Endpoint, network, cloud, and identity security controls
Exploitation chains and kill-chain analysis
Ability to clearly document technical findings and outcomes
Preferred Qualifications
Experience with CI/CD or continuous security testing
Familiarity with detection engineering or SIEM use case testing
Industry certifications (OSCP, CRTO, GXPN, GCED, or similar)
Scripting skills (Python, PowerShell, Bash)
Success Metrics
Percentage of remediations successfully validated
Reduction in repeat findings
Improved detection coverage and response accuracy
Clear validation reporting for leadership and audit teams
Why Join Cardinal Health?
Join us in securing the future of healthcare while building a rewarding and impactful career.
Candidates who are back-to-work, people with disabilities, without a college degree, and Veterans are encouraged to apply.
Cardinal Health supports an inclusive workplace that values diversity of thought, experience and background. We celebrate the power of our differences to create better solutions for our customers by ensuring employees can be their authentic selves each day. Cardinal Health is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state or local law.
To read and review this privacy notice click here
Job details are sourced from the employer's original posting.
Open job postingAbout the company
Cardinal Health is a healthcare services company.