Security Engineer - Remote, Defense & Incident Response

Far Coder; San Mateo (CA); On-site; USD 155,000 - 190,000; Full time

Job summary

Cala Health is hiring a Security Engineer to join our cybersecurity team, focusing on safeguarding assets, incident response, and risk management as we scale our remote-first product environment.

You will automate security testing in CI/CD, manage vulnerabilities, conduct tabletop exercises, and mentor engineers on secure coding while supporting cloud security and compliance.

This mid-level role reports to Staff DevOps Engineer and offers a competitive salary with strong growth opportunities.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, or a related technical field.
• 3+ years of experience in Security Engineering, Application Security, or Incident Response.
• Hands-on experience with modern security tooling (Snyk, Dependabot, Burp Suite, Splunk, Datadog).
• Strong understanding of OWASP Top10, CWE, and cloud security best practices.
• Hands-on experience with CI/CD pipelines and build automation tools (Jenkins, GitHub Actions, GitLab CI).
• Proficiency in Python and Shell scripting (Bash) to automate security workflows.

Responsibilities

• Monitor and manage vulnerability and dependency management using SCA tools.
• Track CVEs affecting our tech stack and coordinate remediation.
• Automate dependency updates and integrate security scanning into CI/CD.
• Manage external penetration tests and bug bounty programs.
• Translate vulnerabilities into actionable remediation for engineering teams.
• Design and execute security tabletop exercises for technical and leadership teams.
• Lead CSPM, IAM policies, network segmentation, and secrets management.

Skills

Python

Bash scripting

CI/CD security

Security concepts

Education

Bachelor's degree in Computer Science or related field

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Job description

Cala Health is hiring a Security Engineer to join our cybersecurity team, focusing on safeguarding assets, incident response, and risk management as we scale our remote-first product environment.

You will automate security testing in CI/CD, manage vulnerabilities, conduct tabletop exercises, and mentor engineers on secure coding while supporting cloud security and compliance.

This mid-level role reports to Staff DevOps Engineer and offers a competitive salary with strong growth opportunities.