This will rather depend on what type of node you are running.
Running a ‘full node’ (full archival node) should not put you at increased risk, given that you do not need to configure your router to accept connections from other nodes on the network.
However if you want to help the network and run a ‘listening node’ (super node) you will either need to configure your router to forward inbound connections on 8333 or run your node over the tor network.
This can put you at increased risk from people trying to access other services running on your machine listening on port 8333.
This can be mitigated by running your node on a dedicated machine (as you are doing) to minimize the attack surface.
Also configuring automatic security updates will help.
Useful resources at:
