Senior Offensive Security Engineer - Remote

R1 RCM, Inc.; Boise (ID); Remote; USD 82,000 - 137,000; Full time

Benefits offered by this job

Annual performance bonus

Job summary

R1 RCM Inc. is seeking a Senior IT Security Engineer to drive penetration testing across infrastructure, networks, and applications in a healthcare technology environment. You will work across multiple cloud platforms and advance testing methodologies and tooling as an individual contributor.

The role emphasizes hands-on testing with opportunities to shape security processes, not just follow a checklist. Remote USA-based position with a strong security posture and collaboration across teams.

Qualifications

• 5+ years of hands-on penetration testing across infrastructure and applications.
• OSCP/GPEN/GWAPT or equivalent demonstrated hands-on skill.
• Experience testing in AWS/Azure/GCP cloud environments.
• Knowledge of MITRE ATT&CK, OWASP Testing Guide, and PTES.

Responsibilities

• Plan and execute penetration tests across internal and external infrastructure, networks, and web and mobile applications.
• Perform application security testing — manual and tool-assisted — integrated into the SDLC, including gray box testing where applicable.
• Test across multiple cloud environments (AWS, Azure, and/or GCP), including IAM and workload exposures.
• Simulate real-world adversary techniques against production and pre-production systems with engineering and infra teams.
• Build, maintain and extend a toolkit spanning open-source and commercial tooling; write custom scripts to close gaps.
• Document findings with risk ratings, reproduction steps, and remediation guidance for engineers and executives.
• Partner with engineering, infra, and product teams to validate fixes and reduce time-to-remediation.
• Support testing tied to HIPAA, SOC 2, and PCI DSS assessments and audits.
• Track emerging attack techniques and threat intelligence relevant to healthcare environments.
• Contribute to tabletop exercises, purple-team activities, and internal security training.

Skills

Penetration testing

Cloud testing

Security tooling

Scripting: Python/PowerShell/Bash

Certification: OSCP/GPEN

HIPAA/SOC2/PCI DSS

Communication

Tools

Burp Suite

Nmap

Metasploit

OWASP ZAP

BloodHound

Job description

R1 RCM Inc. is seeking a Senior IT Security Engineer to drive penetration testing across infrastructure, networks, and applications in a healthcare technology environment. You will work across multiple cloud platforms and advance testing methodologies and tooling as an individual contributor.

The role emphasizes hands-on testing with opportunities to shape security processes, not just follow a checklist. Remote USA-based position with a strong security posture and collaboration across teams.