Security Engineer - Cloud, IR & Secure DevOps (Remote)

Remote; San Francisco (CA); Remote; USD 155,000 - 190,000; Full time

Job summary

Cala Health is seeking a Security Engineer to join our cybersecurity team. You will safeguard digital assets, manage vulnerabilities, coordinate incident response, and promote a security-first culture across engineering teams.

The role blends hands-on defense with strategic leadership in a remote-friendly environment. Responsibilities include managing external penetration tests, improving CI/CD security, implementing IAM and network controls, and leading tabletop exercises with technical and

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, or related field.
• 3+ years of experience in Security Engineering, Application Security, or Incident Response.
• Hands-on experience with modern security tooling (Snyk, Dependabot, Burp Suite, Splunk, Datadog).
• Strong understanding of OWASP Top 10, CWE, and cloud security best practices.
• Hands-on experience with CI/CD pipelines and build automation tools (Jenkins, GitHub Actions, GitLab CI).
• Proficiency in Python and Shell scripting to automate security workflows.

Responsibilities

• Monitor and manage dependencies using SCA tools to mitigate supply chain risks.
• Track CVEs and coordinate with teams to remediate vulnerabilities.
• Lead external Pen Tests and bug bounty programs and translate findings into remediation plans.
• Guide secure coding practices and conduct code/configuration reviews.

Skills

CI/CD security

Python

Shell scripting

Incident response

Threat modeling

OWASP Top 10

Cloud security

Education

Bachelor's degree in CS/SE or related field

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Jenkins

GitHub Actions

GitLab CI

Checkov

Job description

Cala Health is seeking a Security Engineer to join our cybersecurity team. You will safeguard digital assets, manage vulnerabilities, coordinate incident response, and promote a security-first culture across engineering teams.

The role blends hands-on defense with strategic leadership in a remote-friendly environment. Responsibilities include managing external penetration tests, improving CI/CD security, implementing IAM and network controls, and leading tabletop exercises with technical and