Job Description

Headquartered in Dublin, Ohio, Cardinal Health, Inc. (NYSE: CAH) is a global, integrated healthcare services and products company connecting patients, providers, payers, pharmacists and manufacturers for integrated care coordination and better patient management. Backed by nearly 100 years of experience, with more than 50,000 employees in nearly 60 countries, Cardinal Health ranks among the top 20 on the Fortune 500.

Cardinal Healths Information Security team is on a tremendous growth journey adding a number of new team members in our Cyber Threat Operations Center, IT Risk and Compliance, and Security Architecture teams . We aim to be a world-class cybersecurity and risk management organization that enables Cardinal Health to be healthcares most trusted partner. We boast tremendous opportunities to grow and apply technical skills to meet organizational needs, empowering talented team members who mentor and uplift others, led by leaders with a maniacal focus on employee development and well-being, dedicated training programs, and a fun and collaborative atmosphere.

We currently have a career opening for a Cyber Threat Management Engineer

Accountabilities in this role

* Performs research in the area of malicious software, vulnerabilities and exploitation tactics.

* Collaborates extensively with other teams within Cardinal Health to provide threat and vulnerability intelligence data to enrich processes and playbooks

* Regular communication with leadership on emerging threats

* Recommend preventative or defensive actions based on research.

* Driving automation efforts for the benefit of security and threat operations

* Driving control improvements to improve security posture

* Presents data findings and influence organizational partners at multiple levels in the organization

* Establishes metrics and reporting to support the program and influence behaviors

What Information Security contributes to Cardinal Health

* Information Security is responsible for managing information security operations

* Drives information security initiatives through system development life cycles

* Defines solutions that balance information security requirements against business needs

* Participates in identifying, classifying, remediating, and mitigating vulnerabilities

What is expected of you and others at this level?

* Applies comprehensive knowledge and a thorough understanding of concepts, principles and technical capabilities related to threat intelligence framework and methodologies, as well as the vulnerability lifecycle.

* Develops and implements innovative solutions to a wide range of difficult problems.

* Provide diverse thought and promote an inclusive environment

* Develops technical solutions to a wide range of difficult problems. Solutions are innovative and consistent with organizational goals

* Works to create automation and orchestration solutions to assist with vulnerability management

* Provides general guidance on new projects and tasks

* Acts as a mentor to less experienced colleagues

Qualifications

Required Qualifications any combination of below

* Proven experience with Threat Intelligence or Threat Modeling

* Detailed understanding of TTPs, Mitre ATT&CK, Cyber Kill Chain, Diamond Model, etc.

* Excellent analytical, problem solving and decision-making skills, applied with a solution-focused attitude

* Strong self-directed work habits, exhibiting initiative, drive, creativity, maturity, self-assurance and professionalism

* Bachelor's in related field or equivalent work experience

Preferred Qualifications any combination of below

* Familiarity with Cybersecurity Risk Management Frameworks

* Strong Scripting Skills i.e Python, Powershell

* Experience working with SIEM, SOAR, and UEBA tools

* Strong Technical Writing Skills