Senior IT Security Engineer

Job Summary

To enhance security measures, the full-time Senior IT Security Engineer will conduct penetration tests across various infrastructures, networks, and applications in a remote setting, while also maturing testing methodologies and tools for a healthcare technology company.

Key responsibilities

• Plan and execute penetration tests on internal and external systems, networks, and applications
• Perform application security testing integrated into the SDLC, including gray box testing
• Document findings with risk ratings and remediation guidance, collaborating with engineering teams

Required qualifications

• 5+ years of hands-on experience in penetration testing or offensive security
• At least one recognized offensive security certification (e.g., OSCP, CEH)
• Practical experience testing in multiple cloud environments (AWS, Azure, GCP)
• Fluency with both open-source and commercial security tools (e.g., Burp Suite, Metasploit)
• Scripting or automation ability (Python, PowerShell, or Bash) for custom tooling