Purple Team Engineer – Risk & Exposure Management

Cardinal Health

. Prioritize, quantify, and manage cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact .

Posted 11/9/2026full-timeIndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber risk management by correlating threat intelligence, vulnerability data, and business impact, while effectively communicating risk posture to stakeholders. Proficient in analyzing attack paths and exposure scenarios across various environments, ensuring alignment with enterprise risk tolerance.

Highest-signal resume keywords

Cyber Risk ManagementThreat ModelingVulnerability ManagementRisk Quantification ModelsMITRE ATT&CK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat Intelligence AnalysisAttack Path ModelingRisk Scoring FrameworksExploit Lifecycle UnderstandingSecurity Control Impact Assessment

Soft Skills

Analytical SkillsCommunication Skills

Tools & Technologies

Vulnerability Management PlatformsAttack Surface Management ToolsBreach and Attack Simulation ToolsCloud Risk Management (AWS, Azure, GCP)

Certifications & Qualifications

CISSPCRISCGCIH

Industry Keywords

Red TeamingBlue TeamingPurple TeamingGRCCompliance

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Prioritize, quantify, and manage cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact
Analyze and correlate data from vulnerability management platforms, red and purple team exercises, threat intelligence and exploit trends, and attack surface management tools
Identify and prioritize real-world exploitable risks rather than theoretical vulnerabilities
Model attack paths and exposure scenarios across identity, cloud environments, network, and endpoint assets
Partner with Red and Blue teams to assess likelihood and impact of attack techniques
Align technical findings to enterprise risk tolerance
Support risk scoring and reporting frameworks, including CVSS, exploitability, and business context
Communicate risk posture to security leadership, GRC and compliance teams, and engineering and infrastructure owners
Track remediation progress and residual risk
Influence security investments based on risk reduction outcomes

Requirements

What you’ll need

5–8+ years of experience in security operations, threat modeling, or risk management
Strong understanding of adversary tradecraft, including MITRE ATT&CK
Strong understanding of vulnerability management and exploit lifecycles
Strong understanding of security control impact on risk reduction
Experience translating technical security findings into business risk
Strong analytical and communication skills
Preferred: experience with attack surface management or breach and attack simulation tools
Preferred: experience with risk quantification models such as FAIR
Preferred: cloud risk management experience with AWS, Azure, or GCP
Preferred: background in purple teaming, red teaming, or detection engineering
Preferred: certifications such as CISSP, CRISC, GCIH, or threat-focused credentials

Benefits

Comp & perks

Continuous learning, mentorship, and career development opportunities
Collaborative, supportive, and innovation-driven culture
Equal Opportunity employer