Senior Offensive Security Engineer - Pen Test

R1; United States; Remote; USD 51,000 - 137,000; Full time

Job summary

R1 RCM Inc. is hiring a Senior IT Security Engineer to strengthen how we find and fix vulnerabilities before attackers do.

You will run hands-on penetration tests across infrastructure, networks, and applications, work across AWS, Azure, and/or GCP, and mature testing tooling for a healthcare technology company at scale. This is an individual contributor role with room to shape process and our security testing program.

Qualifications

• 5+ years of hands-on experience in penetration testing or offensive security.
• Practical experience testing in multiple cloud environments (AWS, Azure, and/or GCP).
• Familiarity with MITRE ATT&CK, OWASP Testing Guide, PTES.

Responsibilities

• Plan and execute penetration tests across internal and external infrastructure, networks, and web/mobile applications.
• Perform application security testing—manual and tool-assisted—integrated into the SDLC.
• Test across multiple cloud environments (AWS, Azure, and/or GCP) including IAM and workload exposures.
• Document findings with risk ratings, reproduction steps, and remediation guidance for engineers and stakeholders.
• Partner with engineering, infrastructure, and product teams to validate fixes and reduce time-to-remediation.

Skills

Penetration testing

Cloud security

Scripting (Python)

Threat modeling

Education

OSCP/GPEN/GWAPT or equivalent

Multiple cloud environment testing

Tools

Burp Suite

Nmap

Metasploit

OWASP ZAP

BloodHound

Job description

R1 RCM Inc. is hiring a Senior IT Security Engineer to strengthen how we find and fix vulnerabilities before attackers do.

You will run hands-on penetration tests across infrastructure, networks, and applications, work across AWS, Azure, and/or GCP, and mature testing tooling for a healthcare technology company at scale. This is an individual contributor role with room to shape process and our security testing program.