Remote Security Engineer: Code, Detect & Defend Healthcare

Ceresti Health; Oregon; Hybrid; USD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work

Health benefits

Equity participation

PTO policy

Job summary

Ceresti Health is seeking a Security Engineer to bridge the CISO office and Engineering. You will read code, build security tooling, and run attack simulations to prove gaps with concrete remediation plans.

In collaboration with Engineering, you will secure AWS deployments, integrate Snyk and Docker Scout into the dev workflow, and drive threat modeling, testing, and SOC 2/HITRUST readiness. This is a hands-on, collaborative role.

Qualifications

• Five to seven years in software or security engineering.
• Hands-on code literacy in Python, Go, or similar.
• Threat modeling, dependency and container scanning expertise.
• Knowledge of AWS cloud security and CI/CD pipelines.
• Ability to explain findings to engineers and demonstrate remediation.

Responsibilities

• Secure the code Engineering writes and maintain threat models.
• Review code for security and manage Snyk and Docker Scout thresholds.
• Evaluate software bills of materials and drive fixes to closure.
• Build and tune security tooling, logging, and signal enrichment.
• Conduct penetration tests and plan independent third-party assessments.

Skills

Python

Go

Threat modeling

Dependency scanning

Container scanning

Cloud security AWS

CI/CD security

Attack simulations

Communication with engineers

Tools

Snyk

Docker Scout

SAST

SCA

Job description

Ceresti Health is seeking a Security Engineer to bridge the CISO office and Engineering. You will read code, build security tooling, and run attack simulations to prove gaps with concrete remediation plans.

In collaboration with Engineering, you will secure AWS deployments, integrate Snyk and Docker Scout into the dev workflow, and drive threat modeling, testing, and SOC 2/HITRUST readiness. This is a hands-on, collaborative role.