Security Engineer: Threat Modeling & Automation (Remote)

Ceresti Health; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Full-time remote work

Competitive base salary

Comprehensive health, dental, and view

Equity participation

PTO

Job summary

Ceresti Health is seeking a Security Engineer to bridge the CISO's office and Engineering, writing security tooling, automation, and attack simulations, and integrating security into the developer workflow. You will own Snyk and Docker Scout, review SBOMs, and coordinate remediation with engineers across the stack.

You will help shape secure architecture for cloud-based services, data lake initiatives, and AI/ML work, with a focus on practical, low-noise security outcomes.

Qualifications

• Five to seven years in software or security engineering.
• Proficient in Python, Go, or similar.
• Hands-on application security: threat modeling, dependency and container scanning.
• Working knowledge of cloud security in AWS, and of CI/CD pipelines.
• Offensive fundamentals: you can think like an attacker and build a test.
• The ability to explain findings to an engineer in actionable terms.

Responsibilities

• Secure the code Engineering writes by building threat models for major systems and features.
• Review checked-in code for security flaws; review is hands-on, not only reports.
• Own Snyk and Docker Scout: thresholds, findings, and remediation with owning teams.
• Review SBOM for outdated or vulnerable components and push fixes to closure.
• Review SAST and DAST output and coordinate remediation with engineers.

Skills

Python

Go

Threat modeling

Dependency scanning

Container scanning

AWS security

CI/CD security

Offensive security

Communication with engineers

Tools

Snyk

Docker Scout

SAST

SCA

Job description

Ceresti Health is seeking a Security Engineer to bridge the CISO's office and Engineering, writing security tooling, automation, and attack simulations, and integrating security into the developer workflow. You will own Snyk and Docker Scout, review SBOMs, and coordinate remediation with engineers across the stack.

You will help shape secure architecture for cloud-based services, data lake initiatives, and AI/ML work, with a focus on practical, low-noise security outcomes.