Senior IT Security Engineer (Offensive Security) - Remote

R1 RCM, Inc.; Salt Lake City (UT); Remote; USD 51,000 - 137,000; Full time

Job summary

R1 RCM, Inc. is seeking a Senior IT Security Engineer to fortify vulnerabilities before attackers exploit them.

You will conduct hands-on penetration tests across infrastructure, networks, and applications, spanning multiple cloud environments, and help mature testing methods in a healthcare technology setting. You will operate as an individual contributor, shaping process, building tooling, and collaborating with engineering, infrastructure and product teams to verify fixes and drive secure

Qualifications

• 5+ years of hands-on penetration testing or offensive security across infrastructure and apps.
• Recognised offensive security certification (OSCP, GPEN, GWAPT, GXPN, CEH, etc.) with ongoing learning.
• Experience testing in AWS/Azure/GCP; not just on-prem.
• Familiar with MITRE ATT&CK, OWASP Testing Guide, PTES.
• Fluent in security tooling and selecting appropriate tool for the job.
• Scripting/automation ability (Python/PowerShell/Bash).
• Experience in HIPAA, SOC 2, and PCI DSS environments.
• Strong written and verbal communication; able to explain findings to engineers and non-tech stakeholders.
• Comfortable working autonomously in a fast-paced, large org.

Responsibilities

• Plan and execute penetration tests across internal and external infrastructure, networks, and web/mobile apps.
• Perform application security testing (manual and tool-assisted) integrated into SDLC.
• Test across AWS, Azure, and/or GCP cloud environments including IAM and exposures.
• Simulate real-world adversary techniques and coordinate with engineering.
• Build and extend a toolkit; write scripts to close gaps in coverage.
• Document findings with risk ratings, steps, and remediation guidance.
• Partner with teams to validate fixes and reduce time-to-remediation.
• Support testing tied to HIPAA, SOC 2, PCI DSS assessments and audits.
• Track emerging attack techniques and threat intelligence in healthcare tech.
• Contribute to tabletop exercises, purple-team activities, and security training.

Skills

Penetration testing

Cloud security testing

Security tooling

Scripting (Python/PowerShell/Bash)

HIPAA SOC 2 PCI DSS

Communication skills

Independent work in matrixed org

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

BloodHound

Nuclei

Job description

R1 RCM, Inc. is seeking a Senior IT Security Engineer to fortify vulnerabilities before attackers exploit them.

You will conduct hands-on penetration tests across infrastructure, networks, and applications, spanning multiple cloud environments, and help mature testing methods in a healthcare technology setting. You will operate as an individual contributor, shaping process, building tooling, and collaborating with engineering, infrastructure and product teams to verify fixes and drive secure