Purple Team Engineer – Retesting & Control Validation
Core
Validating security controls by retesting vulnerabilities, attack paths, and detection use cases identified through red team exercises and penetration tests to ensure remediation reduces risk.
Role type
Senior IC Purple Team Engineer (Retesting & Control Validation)
Builds
Validated security posture and effective detection rules for healthcare infrastructure (via careerplan.io/jobs/20188354-purple-team-engineer-retesting-control-validation-at-cardinalhealth)
Domain
Cybersecurity (Offensive/Defensive/Purple Teaming) in Healthcare
Required skills
Vulnerability retesting, Penetration testing, MITRE ATT&CK techniques, Exploitation chain analysis, Security control validation, Detection tuning, Technical documentation, Adversary simulation, Endpoint/Network/Cloud security, Scripting
Preferred skills
CI/CD security testing, Detection engineering, SIEM use case testing, Industry certifications (OSCP, CRTO, GXPN, GCED)
Technologies
Metasploit, Burp Suite, Nuclei, Cobalt Strike, EDR, SIEM, NDR, WAF, IAM, Python, PowerShell, Bash
Responsibilities
Retest vulnerabilities from red team/pen tests, Validate security control fixes and detection rules, Reproduce attack techniques to confirm mitigation, Collaborate with SOC/Blue Team to tune alerts, Document retesting methodology and residual risk, Provide validation sign-off for remediation
Seniority
Senior, hands-on IC
