Security Engineer — Cloud, IR & Threat Prevention

Cala Health; San Mateo (CA); On-site; USD 155,000 - 190,000; Full time

Job summary

Cala Health is seeking a skilled Security Engineer to safeguard our digital assets, manage vulnerabilities, and lead incident response initiatives. You will collaborate with engineering teams to embed security into CI/CD and drive proactive risk management.

The ideal candidate brings hands-on security tooling experience, cloud security expertise, and the ability to communicate complex risks to technical and non-technical stakeholders.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, or a related technical field.
• 3+ years of experience in Security Engineering, Application Security, or Incident Response.
• Hands-on with modern security tooling: Snyk, Dependabot, Burp Suite, Splunk, Datadog.
• Strong knowledge of OWASP Top 10, CWE, and cloud security best practices.
• CI/CD pipelines and build automation (Jenkins, GitHub Actions, GitLab CI).
• Python and Shell scripting to automate security workflows.

Responsibilities

• Monitor and manage dependencies with Software Composition Analysis (SCA) tools to mitigate supply chain risks.
• Track and prioritize CVEs affecting our tech stack and automate updates in CI/CD pipelines.
• Lead external penetration tests and bug bounty programs; translate findings into remediation plans.
• Own and drive security remediation across infrastructure, networks, and applications.
• Design, facilitate, and execute regular security tabletop exercises for teams and leadership.
• Provide guidance to developers on secure coding practices and implement security controls.

Skills

Security engineering

Incident response

CI/CD security

Python

Shell scripting

Education

Bachelor's degree in Computer Science/Software Engineering

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Jenkins

GitHub Actions

GitLab CI

Job description

Cala Health is seeking a skilled Security Engineer to safeguard our digital assets, manage vulnerabilities, and lead incident response initiatives. You will collaborate with engineering teams to embed security into CI/CD and drive proactive risk management.

The ideal candidate brings hands-on security tooling experience, cloud security expertise, and the ability to communicate complex risks to technical and non-technical stakeholders.