Security Engineer – Incident Response & Cloud (Remote)

Cala Health; United States; On-site; USD 155,000 - 190,000; Full time

Job summary

Cala Health seeks a Security Engineer to join our cybersecurity team. You will safeguard our digital assets, manage vulnerabilities, and integrate security into our CI/CD pipelines while guiding engineering teams in secure practices.

This role blends hands-on defense and strategic thinking, with remote work options and potential hybrid arrangement for candidates near our San Mateo headquarters. You will lead incident response, tabletop exercises, and security governance across cloud and on-prem

Qualifications

• Bachelor's degree in a related field is required.
• 3+ years in Security Engineering, Application Security, or Incident Response.
• Hands-on with modern security tooling and threat detection.
• Strong knowledge of OWASP Top 10 and cloud security best practices.
• Experience integrating security into CI/CD pipelines.

Responsibilities

• Monitor dependencies and CVEs to manage supply-chain risks.
• Lead external/internal penetration tests and bug-bounty programs.
• Own security remediation across cloud and on‑prem environments.
• Design tabletop exercises for incident response and drills.

Skills

Security engineering

Vulnerability management

Incident response

CI/CD security

Python

Shell scripting

Cloud security

OWASP Top 10

Security tooling

Education

Bachelor's degree in Computer Science

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Jenkins

GitHub Actions

GitLab CI

Job description

Cala Health seeks a Security Engineer to join our cybersecurity team. You will safeguard our digital assets, manage vulnerabilities, and integrate security into our CI/CD pipelines while guiding engineering teams in secure practices.

This role blends hands-on defense and strategic thinking, with remote work options and potential hybrid arrangement for candidates near our San Mateo headquarters. You will lead incident response, tabletop exercises, and security governance across cloud and on-prem