Info Sec Purple Senior Analyst

What Information Security and Risk contributes to Cardinal Health

Information Technology oversees the effective development, delivery, and operation of computing and information services. This function anticipates, plans, and delivers Information Technology solutions and strategies that enable operations and drive business value.

Information Security and Risk develops, implements, and enforces security controls to protect the organization's technology assets from intentional or inadvertent modification, disclosure or destruction. This job family develops system back-up and disaster recovery plans. Information Technology also conducts incident response, threat management, vulnerability scanning, virus management and intrusion detection and completes risk assessments.

Qualifications

• 2-4 years of experience
• BA, BS or equivalent experience in related field

What is expected of you and others at this level

• Act as a business analyst for the offensive security program
• Schedule offensive security engagements
• Work alongside the offensive security, incident response teams and blue teams, analyze how they work together and recommending improvements
• Proficient with requirements management tools such and agile methodologies
• Track security findings and provide status reports
• Work within ServiceNow
• Apply comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects related to penetration testing

Required Qualifications

• Experience or understanding of Security Operations, Detection Engineering, Threat Intelligence, Penetration Testing, Red Teaming, Purple Teaming, Threat Hunting or Incident Response processes
• Familiarity with threat intelligence, offensive, and defensive cyber security concepts
• Familiarity with Ticket management systems
• Ability to schedule engagements
• Ability to perform some basic project management functionalities
• Strong written and verbal communication skills with an ability to communicate technical details in a clear and understandable manner

Preferred Qualifications

• Bachelor's or Master’s degree in related field or equivalent work experience
• Strongly preferred 2+ years' experience in specific domains of information security
• Experience with scripting in BASH, Python or PowerShell
• Experience with data analysis