Remote job
US-IT Security Eng Sr
Job details
About this role
Role overview Find and help remediate security weaknesses through hands-on offensive testing of infrastructure, networks, and applications. This individual-contributor role combines penetration testing with improvements to security methods and tooling, working with engineering and infrastructure teams in a large healthcare technology environment.
Responsibilities - Plan and conduct internal and external penetration tests across infrastructure, networks, web applications, and mobile applications. - Perform manual and tool-assisted application security testing, including source-assisted testing where appropriate. - Assess cloud configurations, identity and access controls, and workloads across cloud environments. - Simulate realistic adversary techniques in production and pre-production systems in coordination with system owners. - Maintain security tools and write scripts or custom utilities to improve testing coverage. - Document risk, reproduction steps, and remediation guidance; work with teams to validate fixes and support audits, exercises, and security training.
Requirements - At least five years of hands-on penetration testing or offensive security experience across infrastructure, networks, and applications. - A recognized offensive security certification or equivalent demonstrated practical skill. - Practical testing experience in multiple cloud environments. - Working knowledge of MITRE ATT&CK, the OWASP Testing Guide, and PTES. - Fluency with security testing tools and scripting in Python, PowerShell, or Bash. - Experience in environments subject to HIPAA, SOC 2, or PCI DSS, plus strong written and verbal communication skills.
Nice to have - Advanced security certifications such as OSWE, GXPN, CISSP, or CCSP. - Experience with Kubernetes, containers, REST or GraphQL API testing, CI/CD security, or open-source security tools. - Healthcare, healthcare IT, financial services, or AI service security experience.
Benefits and work setup - US-based position with eligibility for an annual bonus plan targeting 10%.