WellSky

WellSky

Red Team - Sr Security Engineer

Overland Park, KS · Senior · Full-time

No sponsorship$53k-$800kDetected 30 days ago
PythonBashPowerShellCode ReviewGitAWSGCPAzureCloud PlatformsKubernetesCI/CDMachine LearningLLMsRAGCybersecurityPenetration TestingSIEMDetection EngineeringIncident ResponseComplianceSupply ChainHIPAAResearchCollaboration

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 4 green-card filings in this occupation, 100% were for a worker who already held the job.

Files H-1B transfers

1 transfer filing in the last year, covering 1 worker. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • The Red Team - Sr Security Engineer is responsible for enterprise information security systems and infrastructure platforms for WellSky.
  • The scope of this job includes information system security administration and maintenance, vulnerability management, and configuration of other security software and solutions.
  • We thrive on innovation, inclusiveness, and cohesive perspectives.

Responsibilities

  • Design, scope, and execute red team engagements and adversary emulation exercises against WellSky systems, cloud environments, and applications, and partner with detection engineering to close the gaps those exercises expose.
  • Lead the implementation and enhancement of security measures across systems and software development processes, system hardening, monitoring, vulnerability assessment and remediation, incident response, disaster recovery by enforcing secure software development lifecycle practices and considering emerging cybersecurity threats.
  • Develop and enforce security controls in colocation and cloud environments in strategic alignment with WellSky policies.
  • Provide technical guidance to development and IT teams by fostering secure software design and deployment.
  • Serve as a subject matter expert for security tools (e.g., SIEM, DLP, EDR, SAST, SCA), optimize configurations and workflows, and provide guidance to other information security teammates and assign tasks as needed.
  • Perform other job duties as assigned.

Requirements

  • Bachelor's degree in a related field or equivalent work experience
  • 6 years related work experience
  • At least 2 years of the above experience in an offensive security role: penetration testing, red teaming, adversary emulation, or purple team
  • Proficiency with offensive tooling such as Burp Suite, Nmap, Metasploit, BloodHound, and Impacket, and with at least one command-and-control framework such as Cobalt Strike, Sliver, or Mythic
  • Cloud attack and defense experience in AWS, Azure, or GCP, including IAM abuse paths, misconfiguration exploitation, and cloud-native logging and controls
  • Demonstrated ability to communicate findings to both engineering teams and executives, including business risk, exploitability, and prioritized remediation guidance

Nice to have

  • Detection engineering and purple team collaboration, including writing or tuning SIEM detections based on emulated adversary behavior
  • Malware analysis, reverse engineering, or custom payload development and EDR evasion in an authorized testing context
  • Active Directory and Microsoft Entra ID attack path analysis and hardening
  • Container and Kubernetes security testing, and CI/CD pipeline or software supply chain attack techniques
  • Application security depth, including SAST, DAST, and SCA triage, secure code review, and threat modeling
  • Contributions to the security community such as open-source tooling, CVE research, CTF placement, conference talks, or published research
  • Experience testing AI and LLM-enabled applications for prompt injection, jailbreaks, insecure output handling, data leakage, and agent or tool-abuse paths
  • Familiarity with the OWASP Top 10 for LLM Applications, MITRE ATLAS, and the NIST AI Risk Management Framework

Compensation

  • Educational assistance up to $2500 per year

Company info

  • Leverage AI tools and platforms as an integral part of daily responsibilities to enhance decision-making, streamline workflows, and drive data-informed outcomes.

Visa & Work Authorization

  • Applicants for U.S.-based positions with WellSky must be legally authorized to work in the United States.
Apply directly at WellSky →Create a free account for alerts like thisView WellSky immigration profile

This listing is sourced directly from WellSky's careers page and normalized into a canonical job model.