Red Team - Sr Security Engineer at WellSky

Setup: On-site
Location: Overland Park, Kansas
Type: Full-time
Level: not_specified
Posted: Aug 20, 2026

Description

The Red Team – Senior Security Engineer at WellSky focuses on securing enterprise information systems and infrastructure. This role involves designing and executing red team engagements, leading security measure implementation, analyzing technical requirements, providing security guidance to development teams, participating in incident response, serving as an expert for security tools, leveraging AI tools, and performing other assigned duties.

Required Skills

Information Security Systems
Vulnerability Management
Cloud Environments
SIEM
DLP
EDR
SAST
SCA
MITRE ATT&CK framework
Burp Suite
Nmap
Metasploit
BloodHound
Impacket
AWS
Azure
GCP
Python
PowerShell
Bash
Go

Additional Information

Required Previous Experiences: At least 2 years of offensive security role experience.
Hands-on experience executing the full attack lifecycle.
Working knowledge of the MITRE ATT&CK framework.
Proficiency with offensive tooling like Burp Suite, Nmap, Metasploit, etc.
Daily use of AI assistants and agentic coding tools.
Preferred Qualifications: Experience in detection engineering and purple team collaboration.
Malware analysis, reverse engineering, or custom payload development.
Attack path analysis and hardening for Active Directory and Microsoft Entra ID.
Container and Kubernetes security testing, and CI/CD pipeline attacks.
Application security depth involving SAST, DAST, SCA triage, secure code reviews, and threat modeling.
Contributions to the security community via open-source, CVE research, CTF participation, or speaking engagements.
Ability to script and automate using Python, PowerShell, Bash, or Go.
Experience testing AI and LLM applications for various vulnerabilities.
Familiarity with OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI Risk Management Framework.
Experience in building AI-assisted security automation.
Understanding of securing AI infrastructure aspects.
Experience in assessing third-party AI tools for enterprise risk.
OSCP, OSEP, OSWE, CRTO, GPEN, GXPN, or PNPT certifications.
AWS, Azure, or GCP security specialty certification.
CISSP, GCIH, or GCIA certifications.
Healthcare industry experience.
Knowledge of HIPAA Security Rule, HITRUST CSF, SOC 2, NIST 800-53/NIST Cybersecurity Framework regarding offensive testing constraints.
Experience in authorized testing within regulated environments.