Remote Security Engineer: Cloud, IR & Secure DevOps

Cala Health; San Mateo (CA); Hybrid; USD 147,000 - 199,000; Full time

Job summary

Cala Health is seeking a Security Engineer to join our cybersecurity team. You will safeguard our digital assets, manage risks, and lead incident responses while promoting security awareness across engineering teams.

The role blends hands-on defense with strategic thinking and involves tabletop exercises, CSPM, and secure coding reviews. We value experience with security tooling, CI/CD integration, and cloud security, and encourage mentoring and security training for engineers.

Qualifications

• 3+ years of experience in Security Engineering, Application Security, or Incident Response.
• Hands-on experience with modern security tooling (e.g., Snyk, Dependabot, Burp Suite, Splunk, Datadog).
• Strong understanding of OWASP Top 10, CWE, and cloud security best practices.
• CI/CD pipelines and build automation tools (e.g., Jenkins, GitHub Actions, GitLab CI).
• Proficiency in Python and Shell scripting (Bash) to automate security workflows.

Responsibilities

• Monitor and manage open-source and third-party dependencies using SCA tools to mitigate supply chain risks.
• Track and prioritize CVEs affecting our tech stack.
• Collaborate with development teams to automate dependency updates and security scanning in CI/CD.

Job description

Cala Health is seeking a Security Engineer to join our cybersecurity team. You will safeguard our digital assets, manage risks, and lead incident responses while promoting security awareness across engineering teams.

The role blends hands-on defense with strategic thinking and involves tabletop exercises, CSPM, and secure coding reviews. We value experience with security tooling, CI/CD integration, and cloud security, and encourage mentoring and security training for engineers.