Job Description

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

The Cardinal Health Cyber Threat Operations Center (CTOC) is on a tremendous growth journey. Comprised of Operations, Engineering, and a dedicated Purple team, we aim to be a world-class cybersecurity organization that enables Cardinal Health to be healthcares most trusted partner. We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empowering talented engineers who mentor and uplift others, led by leaders with a maniacal focus on employee development and well-being, dedicated training programs, and a fun and collaborative atmosphere.

We currently have an opening for a Cyber Security Analyst.

Role Overview

As a Cyber Security Analyst you will be responsible to assist with an ongoing program of simulated cyber-attacks based on prioritized threats to the company. You will be tasked with working with both blue and red teams closely together to maximize cyber capabilities through continuous feedback and knowledge transfer.

Testing will include network penetration, web and mobile application testing, threat analysis, wireless network assessment, and IDS/IPS evasion techniques. This role will collaborate significantly with internal and external clients within a Cyber Threat Command Center environment to further secure the Cardinal Health enterprise.

What is expected of you in this role?

* Assist in the development of representative Advanced Persistent Attack (APT) and adversarial based scenarios

* Maintain an automated testing platform for offensive security purposes

* Test key threat scenarios against business technologies using adversarial attack tools, tactics and techniques.

* Integrate threat intelligence, offensive, and defensive cyber security solutions

* Work alongside the offensive security, threat intel and incident response teams and blue teams, analyze how they work together and recommending adjustments

* Develop metrics around adversarial engagements

* Partake in Cyber war gaming efforts and applying results to build stronger cyber defenses

* Developing attack Tactics, Techniques and Procedures (TTPs) using the MITRE ATT&CK Framework construct

* Working with SIEM technologies

* Working with scripting in BASH, Python or PowerShell

* Apply comprehensive knowledge and a thorough understanding of concepts, principles, and technical capabilities to perform varied tasks and projects related to incident response

Qualifications

* General understanding of information security concepts and tools.

* Willingness to learn and work within a team collaborative environment.