Senior IT Security Engineer - Remote Offensive Security

R1 RCM, Inc.; Detroit (MI); Remote; USD 51,000 - 137,000; Full time

Job summary

R1 RCM, Inc. is seeking a Senior IT Security Engineer to advance penetration testing across our infrastructure, networks, and applications. You will work across AWS/Azure/GCP, mature testing methodologies, and build tooling to close coverage gaps in a healthcare technology environment.

This is an individual contributor role with impact on security posture. You will document findings, communicate risk to engineers and executives, and support compliance-related testing for HIPAA, SOC 2, and PCI

Qualifications

• 5+ years in penetration testing or offensive security across infra/network and app security.
• One recognized offensive security certification (OSCP/GPEN/CEH or equivalent).
• Experience testing in AWS/Azure and/or GCP, not just on‑prem.
• Familiarity with MITRE ATT&CK, OWASP Testing Guide, PTES.
• Proficient in scripting (Python, PowerShell, Bash).
• Experience with HIPAA, SOC 2, and PCI DSS compliance.

Responsibilities

• Plan and perform penetration tests across internal/external infrastructure, networks, and web/mobile apps.
• Conduct manual and tool-assisted security testing integrated into SDLC (gray box when applicable).
• Test across multiple cloud environments and assess IAM configurations.
• Simulate real-world adversary techniques and coordinate with engineering to validate fixes.
• Develop and extend a security toolkit; write scripts to close gaps in coverage.
• Document findings with risk ratings, steps to reproduce, and remediation guidance.
• Collaborate with engineering, infrastructure, and product teams to reduce time-to-remediation.
• Support testing tied to HIPAA/SOC 2/PCI DSS assessments and audits.
• Track emerging attack techniques and threat intelligence relevant to healthcare.
• Contribute to tabletop exercises and internal security training.

Skills

Penetration testing

Cloud security testing

Threat modeling

Strong communication

Education

OSCP/GPEN/CEH or similar

Experience with HIPAA SOC 2 PCI DSS

Tools

Burp Suite

Zap

Nmap

Metasploit

BloodHound

Nuclei

OWASP ZAP

Job description

R1 RCM, Inc. is seeking a Senior IT Security Engineer to advance penetration testing across our infrastructure, networks, and applications. You will work across AWS/Azure/GCP, mature testing methodologies, and build tooling to close coverage gaps in a healthcare technology environment.

This is an individual contributor role with impact on security posture. You will document findings, communicate risk to engineers and executives, and support compliance-related testing for HIPAA, SOC 2, and PCI