🕒 3 days ago
Design and implement scalable cloud security controls, automate protections across infrastructure and CI/CD workflows, lead vulnerability and incident response, and mentor engineers to strengthen security at scale.
US-IT Security Eng Sr
🕒 2 days ago
Penetration TestingOffensive SecurityApplication Security TestingCloud Security
📜 Description
- Plan and execute penetration tests across infrastructure, networks, cloud environments, and web and mobile applications.
- Perform manual and tool-assisted application security assessments, including gray-box testing throughout the software development lifecycle.
- Simulate realistic adversary techniques and assess cloud configurations, identity controls, workloads, and exposure points.
- Develop security tools and scripts, improve testing methodologies, and automate repeatable assessments.
- Document findings with risk ratings, reproduction steps, business impact, and remediation guidance; validate fixes with technical teams.
- Support compliance assessments, threat monitoring, tabletop exercises, purple-team activities, and security awareness initiatives.
🛠️ Requirements
- At least five years of hands-on penetration testing or offensive security experience across infrastructure, networks, and applications.
- An offensive security certification such as OSCP, GPEN, GWAPT, GXPN, or CEH, or equivalent practical expertise.
- Practical security assessment experience in AWS, Azure, and/or Google Cloud Platform.
- Knowledge of MITRE ATT&CK, the OWASP Testing Guide, and PTES.
- Proficiency with tools such as Burp Suite, OWASP ZAP, Nmap, Metasploit, BloodHound, and Nuclei; scripting experience with Python, PowerShell, Bash, or similar.
- Experience in environments subject to HIPAA, SOC 2, and/or PCI DSS, with strong technical communication and independent execution skills.
- Container and Kubernetes security, REST and GraphQL API testing, CI/CD security, open-source security tools, healthcare or financial services, and AI security are advantageous.
✨ Benefits
- Annual performance bonus: Eligibility for an annual bonus plan with a target of 10% of eligible compensation
- Healthcare and benefits package: Access to a competitive employee benefits program designed to support employee well-being.
- Fully remote work: The opportunity to work remotely from within the United States.
- Professional development: Opportunities to deepen offensive security expertise, explore emerging technologies
- Career growth: Exposure to large-scale healthcare technology systems, complex security challenges, and cross-functional collaboration.
- Meaningful impact: Help protect sensitive healthcare data, improve technology resilience
- Collaborative environment: Work alongside engineering, infrastructure, product
- Continuous learning: Opportunities to contribute to security innovation, improve testing practices
Full job description
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a US-IT Security Eng Sr based in the United States.
We are seeking an experienced Senior IT Security Engineer to strengthen the security posture of a large-scale healthcare technology environment through proactive vulnerability discovery and offensive security testing. In this hands-on individual contributor role, you will conduct penetration tests across infrastructure, networks, cloud environments, and web and mobile applications to identify and address security weaknesses before they can be exploited. You will collaborate with engineering, product, and infrastructure teams to validate vulnerabilities, prioritize remediation, and integrate security testing into the software development lifecycle. You will also develop custom security tools, enhance testing methodologies, and simulate real-world adversary techniques to improve organizational resilience. Working in a fast-paced, technology-driven environment, you will help protect sensitive healthcare information while supporting compliance with industry regulations and security standards. This remote opportunity offers the chance to influence offensive security practices, explore emerging threats, and contribute to meaningful improvements in healthcare technology security.
How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best! Why Apply Through Jobgether? Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time. #LI-CL1Accountabilities
Requirements
Benefits
Similar jobs
Search more Cybersecurity Engineer jobs
🕒 3 days ago
Own hands-on security across product and infrastructure, from vulnerability management and threat modeling to incident response, cloud hardening, and automation that reduces risk as the platform scales.
🕒 4 days ago
Own production security improvements across cloud infrastructure, Kubernetes, CI/CD, and identity systems, while strengthening reliability and making secure workflows practical and easy for engineers to adopt.
📍 🇨🇭 Switzerland - Remote💰 €50k - €67k / year⏳ Temporary/Contract🎸 Senior📏 Cybersecurity Engineer📢 🇬🇧 English Required
🕒 4 days ago
Embed security across the software development lifecycle by assessing applications and APIs, integrating security into delivery pipelines, and guiding engineering teams toward secure design and remediation.
🕒 2 days ago
Build and maintain secure, auditable data access across a Databricks Lakehouse by managing Unity Catalog permissions, automating controls with Terraform, and supporting governance, audits, and compliance.