Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 63 days ago

Red Team - Sr Security Engineer

WellSky39 open roles

Where
Overland Park, KS
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowRed Team - Sr Security EngineerWellSky · Overland Park, KS

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on WellSky's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market. WellSky postings stay open a median of 28 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 63 days ago

WellSky median: 28 days open

The posting

The Red Team – Sr Security Engineer is responsible for enterprise information security systems and infrastructure platforms for WellSky. The scope of this job includes information system security administration and maintenance, vulnerability management, and configuration of other security software and solutions.

Key Responsibilities:

  • Design, scope, and execute red team engagements and adversary emulation exercises against WellSky systems, cloud environments, and applications, and partner with detection engineering to close the gaps those exercises expose.
  • Lead the implementation and enhancement of security measures across systems and software development processes, system hardening, monitoring, vulnerability assessment and remediation, incident response, disaster recovery by enforcing secure software development lifecycle practices and considering emerging cybersecurity threats.
  • Develop and enforce security controls in colocation and cloud environments in strategic alignment with WellSky policies.
  • Analyze technical requirements and recommend solutions or enhancements to provide actionable guidance for the business that align with industry standards and regulatory compliance.
  • Provide technical guidance to development and IT teams by fostering secure software design and deployment.
  • Participate in the security incident response process by aiding in detection, notification, containment, resolution, and escalation of incidents as needed.
  • Serve as a subject matter expert for security tools (e.g., SIEM, DLP, EDR, SAST, SCA), optimize configurations and workflows, and provide guidance to other information security teammates and assign tasks as needed.
  • Leverage AI tools and platforms as an integral part of daily responsibilities to enhance decision-making, streamline workflows, and drive data-informed outcomes.
  • Perform other job duties as assigned.

Required Qualifications:

  • Bachelor's degree in a related field or equivalent work experience
  • 4 - 6 years related work experience
  • At least 2 years of the above experience in an offensive security role: penetration testing, red teaming, adversary emulation, or purple team
  • Hands-on experience executing the full attack lifecycle - reconnaissance, initial access, privilege escalation, lateral movement, persistence, and exfiltration - against enterprise networks, cloud environments, and web applications
  • Working knowledge of the MITRE ATT&CK framework for planning engagements and mapping findings to detection coverage
  • Proficiency with offensive tooling such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket, and with at least one command-and-control framework such as Cobalt Strike, Sliver, or Mythic
  • Cloud attack and defense experience in AWS, Azure, or GCP, including IAM abuse paths, misconfiguration exploitation, and cloud-native logging and controls
  • Demonstrated ability to communicate findings to both engineering teams and executives, including business risk, exploitability, and prioritized remediation guidance
  • Demonstrated daily use of AI assistants and agentic coding tools such as Claude Code, GitHub Copilot, or Cursor to accelerate research, tooling development, log analysis, and reporting
  • Practical prompt engineering skill, including decomposing security tasks for large language models and critically validating AI-generated output before acting on it
  • Understanding of the security and privacy risks introduced by AI tooling, including safe handling of PHI and other sensitive data in prompts and adherence to responsible-use policies

Preferred Qualifications:

Offensive depth

  • Detection engineering and purple team collaboration, including writing or tuning SIEM detections based on emulated adversary behavior
  • Malware analysis, reverse engineering, or custom payload development and EDR evasion in an authorized testing context
  • Active Directory and Microsoft Entra ID attack path analysis and hardening
  • Container and Kubernetes security testing, and CI/CD pipeline or software supply chain attack techniques
  • Application security depth, including SAST, DAST, and SCA triage, secure code review, and threat modeling
  • Contributions to the security community such as open-source tooling, CVE research, CTF placement, conference talks, or published research
  • Scripting and automation ability in Python, PowerShell, Bash, or Go to build tooling and automate repetitive testing

AI and machine learning security

  • Experience testing AI and LLM-enabled applications for prompt injection, jailbreaks, insecure output handling, data leakage, and agent or tool-abuse paths
  • Familiarity with the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework
  • Experience building AI-assisted security automation, such as agents or scripts for alert triage, recon enrichment, log correlation, or evidence collection
  • Understanding of how to secure AI infrastructure, including model endpoints, MCP servers and tool integrations, RAG data stores, and API key management for AI services
  • Experience evaluating third-party AI tools for enterprise risk and defining safe-use guardrails

Certifications, any of the following

  • Offensive security: OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, or PNPT
  • Cloud: AWS, Azure, or GCP security specialty certification
  • General: CISSP, GCIH, or GCIA

Healthcare and compliance

  • Healthcare industry experience
  • Working knowledge of the HIPAA Security Rule, HITRUST CSF, SOC 2, and NIST 800-53 or the NIST Cybersecurity Framework, and how they constrain offensive testing scope and evidence handling
  • Experience conducting authorized testing in regulated environments under formal rules of engagement and change-control processes

Job Expectations:

  • Willing to work additional or irregular hours as needed
  • Must work in accordance with applicable security policies and procedures to safeguard company and client information
  • Must be able to sit and view a computer screen for extended periods of time

#LI-TC1

#LI-Onsite

WellSky is where independent thinking and collaboration come together to create an authentic culture. We thrive on innovation, inclusiveness, and cohesive perspectives. At WellSky you can make a difference.

Here are some of the exciting benefits full-time teammates are eligible to receive at WellSky:

  • Excellent medical with Rx, dental, and vision benefits
  • Mental Health support through EAP
  • Generous paid time off, plus 13 paid holidays
  • 100% vested 401(K) retirement plans
  • Educational assistance up to $2500 per year

WellSky provides equal employment opportunities to all people without regard to race, color, national origin, ancestry, citizenship, age, religion, gender, sex, sexual orientation, gender identity, gender expression, marital status, pregnancy, physical or mental disability, protected medical condition, genetic information, military service, veteran status, or any other status or characteristic protected by law. WellSky is proud to be a drug-free workplace.

Applicants for U.S.-based positions with WellSky must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire. Certain client-facing positions may be required to comply with applicable requirements, such as immunizations and occupational health mandates.

Data Privacy Notice for Job Applicants and Teammates

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against WellSky's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on WellSky's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    WellSky's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.