Penetration Test Engineer

CHG Healthcare; Salt Lake City (UT); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

401(k) retirement plan with company match

Healthcare benefits including medical and dental coverage

Flexible work schedules

Recognition programs

Family-friendly benefits

Tailored training resources

Volunteer time off

Tuition reimbursement programs

Job summary

A leading healthcare staffing firm seeks a Penetration Test Engineer to enhance security through penetration testing and compliance validation. Candidates should have 5+ years of hands-on experience, knowledge of vulnerabilities, and proficiency with tools like Burp Suite and Kali Linux. This role offers flexible work schedules, a supportive culture, and comprehensive benefits including healthcare, retirement plans, and training resources.

Qualifications

• 5+ years of hands-on penetration testing and offensive security experience.
• Experience in highly regulated industries is preferred.
• Strong scripting skills in Python, Bash, or PowerShell for automation.

Responsibilities

• Conduct penetration testing across critical systems.
• Implement and manage Dynamic Application Security Testing for web applications.
• Validate security controls against compliance frameworks.

Skills

Deep technical knowledge of common vulnerabilities

Experience with penetration testing tools

Proficiency with web application, network, API, and cloud penetration testing methodologies

Ability to creatively use AI tools for testing

Excellent communication skills

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Burp Suite

Kali Linux

Metasploit

Job description

Overview

Healthcare’s helping hand. CHG shook things up in 1979 by inventing the locum tenens staffing model. We connect doctors with patients who need their care. As the largest physician staffing firm in America, our providers treat millions of patients each year. Our industry is growing and demand is high, providing opportunities to grow and develop in your career. Information Security & Privacy is looking for a Penetration Test Engineer to join our team. The Penetration Test Engineer will deliver offensive security capabilities to validate CHG Healthcare's security controls across our multi-brand technology portfolio. As a Penetration Test Engineer on the ISP team you will conduct comprehensive penetration testing, implement DAST for web applications, and validate compliance framework alignment through security testing. This role will report to the Sr. Manager Application Security.

Responsibilities

• Conduct penetration testing across critical systems using comprehensive methodology (network, application, API, cloud, social engineering)
• Implement and manage Dynamic Application Security Testing (DAST) for web applications
• Validate security controls to achieve alignment with compliance frameworks (HIPAA, SOC 2, ISO 27001)
• Leverage AI-powered tools to enhance reconnaissance, vulnerability analysis, and testing workflows
• Support roadmap deliverables focused on demonstrable industry-recognized security controls

Qualifications

• Deep technical knowledge of common vulnerabilities, exploitation techniques, and remediation strategies
• Experience with penetration testing tools (Burp Suite, Metasploit, Kali Linux, etc.)
• Proficiency with web application, network, API, and cloud penetration testing methodologies
• Ability to creatively use AI tools to enhance penetration testing and security research
• Excellent communication skills to explain complex vulnerabilities to technical and non-technical audiences

Education & Experience

• 5+ years of hands-on penetration testing and offensive security experience
• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent work experience

Preferred

• Experience in healthcare or highly regulated industries
• Offensive security certifications such as OSCP, OSCE, OSWE, GPEN, or GXPN
• Experience implementing and managing DAST tools (OWASP ZAP, Burp Suite Enterprise, etc.)
• Strong scripting skills (Python, Bash, PowerShell) for automation and tool development

In Return We Offer

• 401(k) retirement plan with company match
• Traditional healthcare benefits such as medical and dental coverage, onsite health centers, corporate wellness programs, and free behavioral health appointments
• Flexible work schedules - including work-from-home options available
• Recognition programs with rewards including trips, cash, and paid time off
• Family-friendly benefits including paid parental leave, fertility coverage, adoption assistance, and marriage counseling
• Tailored training resources including free LinkedIn learning courses
• Volunteer time off and employee-driven matching grants
• Tuition reimbursement programs

Click here to learn more about our company and culture. CHG Healthcare values a diverse and inclusive workforce. Interested in this role but not a perfect fit? Apply anyway. We welcome applicants of any race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status and individuals with disabilities as an Affirmative Action/Equal Opportunity Employer. We are an at-will employer.