Senior Offensive Security Engineer – Healthcare IT

R1 RCM, Inc.; California; On-site; USD 51,000 - 137,000; Full time

Benefits offered by this job

Competitive benefits package

Annual bonus program

Job summary

R1 RCM Inc. is seeking a Senior IT Security Engineer to strengthen vulnerability discovery across infrastructure, networks, and applications.

You will run hands-on penetration tests across multi-cloud environments and mature testing tooling, shaping security in a healthcare technology company at scale. This individual contributor role emphasizes proactive threat hunting, vulnerability remediation, and collaboration with engineering to meet HIPAA, SOC 2, and PCI DSS requirements.

Qualifications

• 5+ years of hands-on penetration testing or offensive security experience.
• Recognized offensive security certs (OSCP/GPEN/GWAPT/GXPN/CEH) or equivalent demonstrated skills.
• Experience testing in AWS, Azure and/or GCP, not only on-prem.
• Familiar with MITRE ATT&CK, OWASP Testing Guide, PTES frameworks.
• Proficient with Burp Suite, Zap, Nmap, Metasploit, BloodHound, Nuclei, OWASP ZAP.
• Scripting/automation in Python, PowerShell, or Bash to speed testing.
• Experience in HIPAA, SOC 2, and PCI DSS environments.
• Strong written and verbal communication for engineers and leadership.

Responsibilities

• Plan and perform penetration tests across infrastructure, networks, and web/mobile apps.
• Perform manual and tool-assisted security testing integrated into the SDLC.
• Test across cloud environments (AWS, Azure, GCP); assess IAM and workload exposure.
• Document findings with risk ratings, steps to reproduce, and remediation guidance.
• Collaborate with engineering to validate fixes and reduce remediation time.
• Contribute to tabletop exercises, purple-team activities, and security training.

Skills

Penetration testing

Cloud security

Certifications (OSCP/GPEN/GWAPT)

Tooling proficiency (Burp Suite, Zap,N

Scripting (Python/PowerShell/Bash)

HIPAA/SOC2/PCI DSS

Communication skills

Tools

Burp Suite

Zap

Nmap

Metasploit

BloodHound

Nuclei

OWASP ZAP

Job description

R1 RCM Inc. is seeking a Senior IT Security Engineer to strengthen vulnerability discovery across infrastructure, networks, and applications.

You will run hands-on penetration tests across multi-cloud environments and mature testing tooling, shaping security in a healthcare technology company at scale. This individual contributor role emphasizes proactive threat hunting, vulnerability remediation, and collaboration with engineering to meet HIPAA, SOC 2, and PCI DSS requirements.