Senior IT Security Engineer

🔥 8 minutes ago

🇺🇸 United States – Remote

💵 $50.6k - $137.5k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

R1 RCM

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2017

💼 Consulting

📦 Logistics

🏥 Healthcare

💰 Private Equity Round on 2024-07

Consulting • Logistics • Healthcare

R1 RCM is a leading provider of revenue cycle management solutions for the healthcare industry. With an emphasis on maximizing financial performance and optimizing patient care, R1 offers a comprehensive platform that integrates data analytics, intelligent technologies, and deep expertise in revenue cycle management. The company assists healthcare providers—ranging from hospitals and health systems to physician and specialty care practices—in capturing revenue opportunities, improving payer and patient cash flows, and ensuring compliance with government regulations. R1 is committed to driving cost reductions and revenue improvements while enhancing the patient experience. Their suite of services includes revenue recovery, clinical integrity, and regulatory navigation, making them a trusted partner for many top healthcare providers.

📋 Description

• Plan and execute penetration tests across internal and external infrastructure, networks, and web and mobile applications • Perform manual and tool-assisted application security testing integrated into the SDLC, including gray-box testing • Test AWS, Azure, and/or GCP environments, including cloud configuration, IAM, and workload-level exposures • Simulate real-world adversary techniques against production and pre-production systems with engineering and infrastructure owners • Build, maintain, and extend open-source and commercial security tooling • Write custom scripts and tools to close coverage gaps • Document findings with risk ratings, reproduction steps, and remediation guidance for engineering teams and executives • Partner with engineering, infrastructure, and product teams to validate fixes and reduce time-to-remediation • Support HIPAA, SOC 2, and PCI DSS compliance testing and audits • Track emerging attack techniques, exploits, and threat intelligence relevant to healthcare and revenue cycle technology • Contribute to tabletop exercises, purple-team collaboration, and internal security training as needed

🎯 Requirements

• 5+ years of hands-on experience in penetration testing or offensive security, spanning infrastructure/network and application security testing • At least one recognized offensive security certification, such as OSCP, GPEN, GWAPT, GXPN, CEH, or equivalent demonstrated hands-on skill • Practical experience testing in multiple cloud environments (AWS, Azure, and/or GCP) • Working knowledge of MITRE ATT&CK, the OWASP Testing Guide, and PTES • Fluency with open-source and commercial security tooling, including Burp Suite, ZAP, Nmap, Metasploit, BloodHound, and Nuclei • Scripting or automation ability in Python, PowerShell, or Bash • Experience operating in environments subject to HIPAA, SOC 2, and/or PCI DSS • Strong written and verbal communication skills • Ability to operate independently in a large, fast-paced, matrixed organization • Preferred: OSWE, OSCE/OSEE, GXPN, CISSP, or CCSP • Preferred: experience testing containerized environments and Kubernetes • Preferred: API security testing experience with REST/GraphQL • Preferred: familiarity with CI/CD pipeline security and secure SDLC integration • Preferred: experience contributing to or maintaining open-source security tools • Preferred: healthcare, healthcare IT, or financial services industry experience • Preferred: experience with AI models, harnesses, and exploiting AI services

🏖️ Benefits

• Annual bonus plan at a target of 10.00% • Competitive benefits package • Opportunities to constantly learn, collaborate across groups, and explore new career paths • Opportunity to contribute, think boldly, and create meaningful work • Reasonable accommodation support for applicants with disabilities