Security Engineer — Threat & Incident Response (Remote)

Cala Health, Inc.; United States; Remote; USD 155,000 - 190,000; Full time

Job summary

Cala Health is seeking a Security Engineer to safeguard our digital assets, infrastructure, and applications. You will lead vulnerability management, incident response, and security tabletop exercises while collaborating across engineering teams.

The role supports remote or hybrid work and offers a competitive US salary range for security professionals with 3+ years of experience. You will mentor juniors and help maintain compliance with SOC 2, ISO 27001, and HIPAA.

Qualifications

• Bachelor’s degree in CS or related field.
• 3+ years in Security Engineering or Incident Response.
• Hands-on with modern security tooling.
• Strong knowledge of OWASP Top 10.
• CI/CD security and build automation.

Responsibilities

• Monitor dependencies with SCA to manage supply chain risk.
• Track CVEs and coordinate remediation with engineering.
• Automate security scanning in CI/CD pipelines.
• Lead external pentests and bug bounty programs.
• Own security remediation across infra, networks, and apps.
• Run incident response and post-mortem reviews.
• Design and run security tabletop exercises.
• Manage CSPM for AWS/GCP.

Skills

Security Engineering

Application Security

Incident Response

CI/CD Security

Python

Shell Scripting

Go

JavaScript

TypeScript

Rust

Docker

AWS

GCP

Snyk

Dependabot

Burp Suite

Splunk

Datadog

OWASP Top 10

Jenkins

GitHub Actions

GitLab CI

Checkov

TFLint

Bug Bounty

Education

Bachelor's degree in CS

Tools

Snyk

Dependabot

Burp Suite

Splunk

Datadog

Jenkins

GitHub Actions

GitLab CI

Checkov

TFLint

Job description

Cala Health is seeking a Security Engineer to safeguard our digital assets, infrastructure, and applications. You will lead vulnerability management, incident response, and security tabletop exercises while collaborating across engineering teams.

The role supports remote or hybrid work and offers a competitive US salary range for security professionals with 3+ years of experience. You will mentor juniors and help maintain compliance with SOC 2, ISO 27001, and HIPAA.