Senior Offensive Security Engineer

R1 RCM, Inc.; United States; Remote; USD 51,000 - 137,000; Full time

Benefits offered by this job

Annual bonus

Job summary

R1 RCM, Inc. is seeking a Senior IT Security Engineer to lead hands-on penetration testing across infrastructure, networks, and applications. You’ll work in multiple cloud environments, mature testing methods, and help shape tooling and process in a healthcare technology setting.

This is an individual contributor role with room to influence security strategy. You’ll test across AWS/Azure/GCP, build a robust toolkit, provide remediation guidance, and ensure alignment with HIPAA, SOC 2, and PCI

Qualifications

• 5+ years in penetration testing across infrastructure, networks and apps.
• Certifications such as OSCP/GPEN/GWAPT/GXPN/CEH or equivalent demonstrated.
• Hands-on testing in multiple cloud environments (AWS/AZURE/GCP).
• Knowledge of MITRE ATT&CK, OWASP Testing Guide, PTES frameworks.
• Proficient in Burp Suite, Zap, Nmap, Metasploit, and similar tooling.
• Scripting/automation in Python, PowerShell or Bash for tooling.

Responsibilities

• Plan and execute tests across internal/external infra, networks, and apps.
• Integrate security testing into SDLC with gray‑box capabilities.
• Test across AWS, Azure and/or GCP with IAM and config review.
• Simulate adversary techniques on production and pre‑production gear.
• Extend tooling with scripts to cover gaps and document findings clearly.
• Provide remediation guidance to engineers and stakeholders.
• Collaborate with teams to validate fixes and speed up remediation.
• Support testing for HIPAA, SOC 2, PCI DSS compliance needs.
• Monitor new attack techniques and threat intel relevant to healthcare tech.
• Contribute to tabletop exercises and internal security training.

Skills

Penetration testing

Offensive security

Cloud security testing

MITRE ATT&CK

OWASP PTES/Testing Guide

Scripting (Python/PowerShell/Bash)

Education

Offensive security certifications (OSCP, GPEN, GWAPT, GXPN, CEH)

Tools

Burp Suite

Zap

Nmap

Metasploit

BloodHound

Nuclei

OWASP ZAP

Job description

R1 RCM, Inc. is seeking a Senior IT Security Engineer to lead hands-on penetration testing across infrastructure, networks, and applications. You’ll work in multiple cloud environments, mature testing methods, and help shape tooling and process in a healthcare technology setting.

This is an individual contributor role with room to influence security strategy. You’ll test across AWS/Azure/GCP, build a robust toolkit, provide remediation guidance, and ensure alignment with HIPAA, SOC 2, and PCI