Senior Offensive Security Engineer (Pen Test)

R1 RCM Holdco Inc.; California; Hybrid; USD 51,000 - 137,000; Full time

Benefits offered by this job

Competitive benefits

Job summary

R1 RCM Holdco Inc. is seeking a Senior IT Security Engineer to drive hands-on penetration testing across infrastructure, networks, and applications in multiple cloud environments.

You will shape testing methodology, build tooling, and communicate risk to engineers and executives. As an individual contributor in a fast-paced healthcare tech company, you will help mature security processes, ensure HIPAA/SOC 2/PCI DSS compliance, and contribute to security training and tabletop exercises.

Qualifications

• 5+ years of hands-on penetration testing experience.
• One recognized offensive security certification.
• Experience testing in AWS, Azure, and/or GCP.
• Knowledge MITRE ATT&CK, OWASP Testing Guide, PTES.
• Scripting or automation in Python/PowerShell/Bash.

Responsibilities

• Plan and execute penetration tests across internal and external infrastructure, networks, and web/mobile applications.
• Perform application security testing—manual and tool-assisted—integrated into the SDLC.
• Test across multiple cloud environments (AWS, Azure, GCP) including IAM and workload exposures.
• Document findings with risk ratings, reproducible steps, and remediation guidance.
• Collaborate with engineering and product teams to validate fixes and reduce time-to-remediation.
• Support testing tied to HIPAA, SOC 2, and PCI DSS assessments and audits.
• Track emerging attack techniques and threat intelligence in healthcare environments.
• Contribute to tabletop exercises and internal security training.

Skills

Penetration testing

Offensive security

Cloud environments

Communication skills

Education

Offensive security certification

Tools

Burp Suite

Nmap

Metasploit

OWASP ZAP

Job description

R1 RCM Holdco Inc. is seeking a Senior IT Security Engineer to drive hands-on penetration testing across infrastructure, networks, and applications in multiple cloud environments.

You will shape testing methodology, build tooling, and communicate risk to engineers and executives. As an individual contributor in a fast-paced healthcare tech company, you will help mature security processes, ensure HIPAA/SOC 2/PCI DSS compliance, and contribute to security training and tabletop exercises.