Red Team - Sr Security Engineer

About the role

The Sr Security Engineer on the Red Team is responsible for enterprise information security systems and infrastructure platforms. This role includes information system security administration and maintenance, vulnerability management, and configuration of security software and solutions.

Responsibilities

• Design, scope, and execute red team engagements and adversary emulation exercises against WellSky systems, cloud environments, and applications; partner with detection engineering to close gaps exposed by these exercises.
• Lead the implementation and enhancement of security measures across systems and software development processes, including system hardening, monitoring, vulnerability assessment and remediation, incident response, and disaster recovery by enforcing secure software development lifecycle practices.
• Develop and enforce security controls in colocation and cloud environments in strategic alignment with WellSky policies.
• Analyze technical requirements and recommend solutions or enhancements to provide actionable guidance aligned with industry standards and regulatory compliance.
• Provide technical guidance to development and IT teams to foster secure software design and deployment.
• Participate in the security incident response process, aiding in detection, notification, containment, resolution, and escalation of incidents.
• Serve as a subject matter expert for security tools (e.g., SIEM, DLP, EDR, SAST, SCA), optimize configurations and workflows, and provide guidance to other information security teammates.
• Leverage AI tools and platforms as an integral part of daily responsibilities to enhance decision-making, streamline workflows, and drive data-informed outcomes.
• Perform other job duties as assigned.

Requirements

• Bachelor's degree in a related field or equivalent work experience.
• 4 - 6 years of related work experience.
• At least 2 years of the above experience in an offensive security role: penetration testing, red teaming, adversary emulation, or purple team.
• Hands-on experience executing the full attack lifecycle—reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration—against enterprise networks, cloud environments, and web applications.
• Working knowledge of the MITRE ATT&CK framework for planning engagements and mapping findings to detection coverage.
• Proficiency with offensive tooling such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket, and with at least one command-and-control framework such as Cobalt Strike, Sliver, or Mythic.
• Cloud attack and defense experience in AWS, Azure, or GCP, including IAM abuse paths, misconfiguration exploitation, and cloud-native logging and controls.
• Demonstrated ability to communicate findings to both engineering teams and executives, including business risk, exploitability, and prioritized remediation guidance.
• Demonstrated daily use of AI assistants and agentic coding tools such as Claude Code, GitHub Copilot, or Cursor to accelerate research, tooling development, log analysis, and reporting.
• Practical prompt engineering skill, including decomposing security tasks for large language models and critically validating AI-generated output before acting on it.
• Understanding of the security and privacy risks introduced by AI tooling, including safe handling of PHI and other sensitive data in prompts and adherence to responsible-use policies.

Preferred Qualifications

• Offensive depth in detection engineering and purple team collaboration, including writing or tuning SIEM detections based on emulated adversary behavior.
• Malware analysis, reverse engineering, or custom payload development and EDR evasion in an authorized testing context.
• Active Directory and Microsoft Entra ID attack path analysis and hardening.
• Container and Kubernetes security testing, and CI/CD pipeline or software supply chain attack techniques.
• Application security depth, including SAST, DAST, and SCA triage, secure code review, and threat modeling.
• Contributions to the security community such as open-source tooling, CVE research, CTF placement, conference talks, or published research.
• Scripting and automation ability in Python, PowerShell, Bash, or Go to build tooling and automate repetitive testing.
• AI and machine learning security experience testing AI and LLM-enabled applications for prompt injection, jailbreaks, insecure output handling, data leakage, and agent or tool-abuse paths.
• Familiarity with the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework.
• Experience building AI-assisted security automation, such as agents or scripts for alert triage, recon enrichment, log correlation, or evidence collection.
• Understanding of how to secure AI infrastructure, including model endpoints, MCP servers and tool integrations, RAG data stores, and API key management for AI services.
• Experience evaluating third-party AI tools for enterprise risk and defining safe-use guardrails.
• Certifications, any of the following:
  • Offensive security: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, or PNPT.
  • Cloud: AWS, Azure, or GCP security specialty certification.
  • General: CISSP, GCIH, or GCIA.
• Healthcare industry experience.
• Working knowledge of the HIPAA Security Rule, HITRUST CSF, SOC 2, and NIST 800-53 or the NIST Cybersecurity Framework, and how they constrain offensive testing scope and evidence handling.
• Experience conducting authorized testing in regulated environments under formal rules of engagement and change-control processes.

Job Expectations

• Willing to work additional or irregular hours as needed.
• Must work in accordance with applicable security policies and procedures to safeguard company and client information.
• Must be able to sit and view a computer screen for extended periods of time.

Benefits

• Excellent medical with Rx, dental, and vision benefits.
• Mental Health support through EAP.
• Generous paid time off, plus 13 paid holidays.
• 100% vested 401(K) retirement plans.
• Educational assistance up to $2500 per year.