Senior IT Security Engineer

R1 RCM

. Plan and execute penetration tests across internal and external infrastructure, networks, and web and mobile applications .

Posted 10/15/2026full-timeRemote • United StatesSenior💰 $50,640 - $137,481 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in penetration testing and offensive security, with a strong focus on cloud environments and compliance standards. Proficient in utilizing security tools and scripting to enhance security measures and support engineering teams.

Highest-signal resume keywords

Penetration TestingOffensive Security CertificationCloud Security TestingApplication Security TestingCompliance Testing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingApplication Security TestingCloud Security TestingScripting in PythonScripting in PowerShellScripting in BashRisk AssessmentThreat IntelligenceAPI Security TestingCI/CD Pipeline Security

Soft Skills

Strong Written CommunicationStrong Verbal CommunicationIndependent OperationCollaboration

Tools & Technologies

Burp SuiteZAPNmapMetasploitBloodHoundNuclei

Certifications & Qualifications

OSCPGPENGWAPTGXPNCEHOSWEOSCE/OSEECISSPCCSP

Industry Keywords

HIPAASOC 2PCI DSSHealthcare ITFinancial Services

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformGraphQLKubernetesPythonSDLC

About the role

Key responsibilities & impact

Plan and execute penetration tests across internal and external infrastructure, networks, and web and mobile applications
Perform manual and tool-assisted application security testing integrated into the SDLC, including gray-box testing
Test AWS, Azure, and/or GCP environments, including cloud configuration, IAM, and workload-level exposures
Simulate real-world adversary techniques against production and pre-production systems with engineering and infrastructure owners
Build, maintain, and extend open-source and commercial security tooling
Write custom scripts and tools to close coverage gaps
Document findings with risk ratings, reproduction steps, and remediation guidance for engineering teams and executives
Partner with engineering, infrastructure, and product teams to validate fixes and reduce time-to-remediation
Support HIPAA, SOC 2, and PCI DSS compliance testing and audits
Track emerging attack techniques, exploits, and threat intelligence relevant to healthcare and revenue cycle technology
Contribute to tabletop exercises, purple-team collaboration, and internal security training as needed

Requirements

What you’ll need

5+ years of hands-on experience in penetration testing or offensive security, spanning infrastructure/network and application security testing
At least one recognized offensive security certification, such as OSCP, GPEN, GWAPT, GXPN, CEH, or equivalent demonstrated hands-on skill
Practical experience testing in multiple cloud environments (AWS, Azure, and/or GCP)
Working knowledge of MITRE ATT&CK, the OWASP Testing Guide, and PTES
Fluency with open-source and commercial security tooling, including Burp Suite, ZAP, Nmap, Metasploit, BloodHound, and Nuclei
Scripting or automation ability in Python, PowerShell, or Bash
Experience operating in environments subject to HIPAA, SOC 2, and/or PCI DSS
Strong written and verbal communication skills
Ability to operate independently in a large, fast-paced, matrixed organization
Preferred: OSWE, OSCE/OSEE, GXPN, CISSP, or CCSP
Preferred: experience testing containerized environments and Kubernetes
Preferred: API security testing experience with REST/GraphQL
Preferred: familiarity with CI/CD pipeline security and secure SDLC integration
Preferred: experience contributing to or maintaining open-source security tools
Preferred: healthcare, healthcare IT, or financial services industry experience
Preferred: experience with AI models, harnesses, and exploiting AI services

Benefits

Comp & perks

Annual bonus plan at a target of 10.00%
Competitive benefits package
Opportunities to constantly learn, collaborate across groups, and explore new career paths
Opportunity to contribute, think boldly, and create meaningful work
Reasonable accommodation support for applicants with disabilities