Senior Offensive Security Engineer — Cloud, App & Infra

R1-Rc; United States; Remote; USD 51,000 - 137,000; Full time

Benefits offered by this job

Annual bonus plan (target 10%)

Job summary

R1 RCM Inc. is seeking a Senior IT Security Engineer to conduct hands-on penetration tests across infrastructure, networks, and applications, with cloud work in AWS/Azure/GCP.

You will help mature testing methodologies, write tooling, and document findings for engineering and leadership in a healthcare technology company. You’ll collaborate with cross-functional teams to validate fixes, support compliance testing (HIPAA, SOC 2, PCI DSS), and stay ahead of attacker techniques through ongoing

Qualifications

• 5+ years of hands-on penetration testing in infrastructure/network and application security.
• OSCP, GPEN, GWAPT, GXPN, CEH or equivalent certification with hands-on skill.
• Experience testing in AWS, Azure, and/or GCP environments.
• Familiarity with MITRE ATT&CK, OWASP Testing Guide, PTES.
• Scripting/automation skills (Python/PowerShell/Bash) for tooling and rapid testing.

Responsibilities

• Plan and execute penetration tests across internal and external infrastructure, networks, and web/mobile apps.
• Perform manual and tool-assisted application security testing integrated into SDLC.
• Test cloud configurations and IAM across AWS/Azure/GCP.
• Simulate real-world adversary techniques and coordinate with engineering teams.
• Build, maintain, and extend a security toolkit; write custom scripts to close gaps.
• Document findings with risk ratings and remediation guidance for technical and executive audiences.
• Support testing tied to HIPAA, SOC 2, and PCI DSS compliance assessments.
• Track evolving attack techniques and contribute to training and tabletop exercises.

Skills

Penetration testing

Cloud security testing

Scripting (Python/PowerShell/Bash)

Technical communication

Tools

Burp Suite

OWASP ZAP

Nmap

Metasploit

BloodHound

Nuclei

Kubernetes

Job description

R1 RCM Inc. is seeking a Senior IT Security Engineer to conduct hands-on penetration tests across infrastructure, networks, and applications, with cloud work in AWS/Azure/GCP.

You will help mature testing methodologies, write tooling, and document findings for engineering and leadership in a healthcare technology company. You’ll collaborate with cross-functional teams to validate fixes, support compliance testing (HIPAA, SOC 2, PCI DSS), and stay ahead of attacker techniques through ongoing