{"id":480292,"url":"https://alion.io/job/wellsky-red-team-sr-security-engineer","title":"Red Team - Sr Security Engineer","company":{"id":179706,"name":"WellSky","domain":"wellsky.com","url":"https://alion.io/company/wellsky","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Overland Park, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":102000,"max_usd":195000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Claude Code","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Impacket","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Mythic","optional":false},{"name":"Nmap","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Sliver","optional":false},{"name":"Active Directory","optional":true},{"name":"CI/CD","optional":true},{"name":"CVE","optional":true},{"name":"HIPAA","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"LLM Guardrails","optional":true},{"name":"Machine Learning","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"NIST 800-53","optional":true},{"name":"NIST AI RMF","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"RAG","optional":true},{"name":"SOC 2","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-08-20T00:00:00Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-27T04:32:06Z","board_verified":true,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":68},"description":"The Red Team - Sr Security Engineer is responsible for enterprise information security systems and infrastructure platforms for WellSky. The scope of this job includes information system security administration and maintenance, vulnerability management, and configuration of other security software and solutions.\nKey Responsibilities:\nDesign, scope, and execute red team engagements and adversary emulation exercises against WellSky systems, cloud environments, and applications, and partner with detection engineering to close the gaps those exercises expose.\nLead the implementation and enhancement of security measures across systems and software development processes, system hardening, monitoring, vulnerability assessment and remediation, incident response, disaster recovery by enforcing secure software development lifecycle practices and considering emerging cybersecurity threats.\nDevelop and enforce security controls in colocation and cloud environments in strategic alignment with WellSky policies.\nAnalyze technical requirements and recommend solutions or enhancements to provide actionable guidance for the business that align with industry standards and regulatory compliance.\nProvide technical guidance to development and IT teams by fostering secure software design and deployment.\nParticipate in the security incident response process by aiding in detection, notification, containment, resolution, and escalation of incidents as needed.\nServe as a subject matter expert for security tools (e.g., SIEM, DLP, EDR, SAST, SCA), optimize configurations and workflows, and provide guidance to other information security teammates and assign tasks as needed.\nLeverage AI tools and platforms as an integral part of daily responsibilities to enhance decision-making, streamline workflows, and drive data-informed outcomes.\nPerform other job duties as assigned.\nRequired Qualifications:\nBachelor's degree in a related field or equivalent work experience \n4 - 6 years related work experience \nAt least 2 years of the above experience in an offensive security role: penetration testing, red teaming, adversary emulation, or purple team\nHands-on experience executing the full attack lifecycle - reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration - against enterprise networks, cloud environments, and web applications\nWorking knowledge of the MITRE ATT&CK framework for planning engagements and mapping findings to detection coverage\nProficiency with offensive tooling such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket, and with at least one command-and-control framework such as Cobalt Strike, Sliver, or Mythic\nCloud attack and defense experience in AWS, Azure, or GCP, including IAM abuse paths, misconfiguration exploitation, and cloud-native logging and controls\nDemonstrated ability to communicate findings to both engineering teams and executives, including business risk, exploitability, and prioritized remediation guidance\nDemonstrated daily use of AI assistants and agentic coding tools such as Claude Code, GitHub Copilot, or Cursor to accelerate research, tooling development, log analysis, and reporting\nPractical prompt engineering skill, including decomposing security tasks for large language models and critically validating AI-generated output before acting on it\nUnderstanding of the security and privacy risks introduced by AI tooling, including safe handling of PHI and other sensitive data in prompts and adherence to responsible-use policies\nPreferred Qualifications:\nOffensive depth\nDetection engineering and purple team collaboration, including writing or tuning SIEM detections based on emulated adversary behavior\nMalware analysis, reverse engineering, or custom payload development and EDR evasion in an authorized testing context\nActive Directory and Microsoft Entra ID attack path analysis and hardening\nContainer and Kubernetes security testing, and CI/CD pipeline or software supply chain attack techniques\nApplication security depth, including SAST, DAST, and SCA triage, secure code review, and threat modeling\nContributions to the security community such as open-source tooling, CVE research, CTF placement, conference talks, or published research\nScripting and automation ability in Python, PowerShell, Bash, or Go to build tooling and automate repetitive testing\nAI and machine learning security\nExperience testing AI and LLM-enabled applications for prompt injection, jailbreaks, insecure output handling, data leakage, and agent or tool-abuse paths\nFamiliarity with the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework\nExperience building AI-assisted security automation, such as agents or scripts for alert triage, recon enrichment, log correlation, or evidence collection\nUnderstanding of how to secure AI infrastructure, including model endpoints, MCP servers and tool integrations, RAG data stores, and API key management for AI services\nExperience evaluating third-party AI tools for enterprise risk and defining safe-use guardrails\nCertifications, any of the following\nOffensive security: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, or PNPT\nCloud: AWS, Azure, or GCP security specialty certification\nGeneral: CISSP, GCIH, or GCIA\nHealthcare and compliance\nHealthcare industry experience\nWorking knowledge of the HIPAA Security Rule, HITRUST CSF, SOC 2, and NIST 800-53 or the NIST Cybersecurity Framework, and how they constrain offensive testing scope and evidence handling\nExperience conducting authorized testing in regulated environments under formal rules of engagement and change-control processes\nJob Expectations:\nWilling to work additional or irregular hours as needed\nMust work in accordance with applicable security policies and procedures to safeguard company and client information\nMust be able to sit and view a computer screen for extended periods of time\nWellSky is where independent thinking and collaboration come together to create an authentic culture. We thrive on innovation, inclusiveness, and cohesive perspectives. At WellSky you can make a difference.\nHere are some of the exciting benefits full-time teammates are eligible to receive at WellSky:\nExcellent medical with Rx, dental, and vision benefits\nMental Health support through EAP\nGenerous paid time off, plus 13 paid holidays\n100% vested 401(K) retirement plans\nEducational assistance up to $2500 per year\nWellSky provides equal employment opportunities to all people without regard to race, color, national origin, ancestry, citizenship, age, religion, gender, sex, sexual orientation, gender identity, gender expression, marital status, pregnancy, physical or mental disability, protected medical condition, genetic information, military service, veteran status, or any other status or characteristic protected by law. WellSky is proud to be a drug-free workplace.\nApplicants for U.S.-based positions with WellSky must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Certain client-facing positions may be required to comply with applicable requirements, such as immunizations and occupational health mandates.\nData Privacy Notice for Job Applicants and Teammates","description_format":"text","description_chars":7278,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","EHR & Clinical Software","Practice Management Software","Care Coordination & Population Health"],"lifecycle":[{"event":"open","at":"2026-09-06T16:09:45Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 5 · green card filings: 2","filings_12m":5,"filings_prev_12m":17,"green_card_filings_12m":2,"median_offered_wage_usd":133214,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":18,"band":"cold","label":"Long shot","p_open":1,"p_active":0.637,"p_room":0.28,"age_days":68,"expected_fill_days":21,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/wellsky-red-team-sr-security-engineer","json_url":"https://alion.io/job/wellsky-red-team-sr-security-engineer.json","meta":{"generated_at":"2026-10-27T17:15:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6812,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179706},"rest":"https://alion.io/mcp/rest/get_company?id=179706"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwellsky-red-team-sr-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwellsky-red-team-sr-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwellsky-red-team-sr-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wellsky-red-team-sr-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwellsky-red-team-sr-security-engineer"}]}