Remote Security Engineer: Cloud & Incident Response

calahealth; United States; Remote; USD 155,000 - 190,000; Full time

Benefits offered by this job

Remote-first

Job summary

Cala Health, a healthcare technology company, is hiring a Security Engineer to protect digital assets, infrastructure, and applications. The role blends hands-on defense with strategic oversight across vulnerability management, incident response, and security culture building.

Remote-first with optional hybrid work near San Mateo, CA; reports to Staff DevOps Engineer. The role focuses on vulnerability management, external pen tests, cloud security, and implementing controls across AWS/GCP

Qualifications

• Bachelor's degree in CS or related field.
• 3+ years in security engineering or related discipline.
• Hands-on with modern security tooling and platforms.
• Experience integrating security scanning into CI/CD pipelines.

Responsibilities

• Monitor dependencies and CVEs; integrate security scanning into CI/CD pipelines.
• Coordinate external pen tests and bug bounty programs; translate findings for engineering teams.
• Drive security remediation across infrastructure, networks, and applications with IAM, segmentation, secrets mgmt.
• Serve on Incident Response team; on-call, investigate SIEM/EDR/cloud logs; lead post-incident reviews.
• Design security tabletop exercises for technical teams and leadership; surface gaps.
• Maintain cloud security posture across AWS/GCP; track KPIs and aid SOC 2, ISO 27001, HIPAA controls.

Skills

Security engineering

Incident response

Cloud security

Python scripting

CI/CD security

Education

Bachelor's degree in CS/SE

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Job description

Cala Health, a healthcare technology company, is hiring a Security Engineer to protect digital assets, infrastructure, and applications. The role blends hands-on defense with strategic oversight across vulnerability management, incident response, and security culture building.

Remote-first with optional hybrid work near San Mateo, CA; reports to Staff DevOps Engineer. The role focuses on vulnerability management, external pen tests, cloud security, and implementing controls across AWS/GCP