{"id":812913,"url":"https://alion.io/job/calahealth-security-engineer","title":"Security Engineer","company":{"id":669478,"name":"Cala Health","domain":"calahealth.com","url":"https://alion.io/company/calahealth","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":155000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Datadog","optional":false},{"name":"Dependabot","optional":false},{"name":"GCP","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"HIPAA","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Checkov","optional":true},{"name":"Docker","optional":true},{"name":"JavaScript","optional":true},{"name":"Rust","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-08-17T18:54:29Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-11-02T02:16:47Z","board_verified":true,"closed_at":null,"days_open":76,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":76},"description":"About Cala\nAt Cala, we’re working to free people from the burden of chronic disease. We began by creating the first non-invasive prescription therapy for hand tremor. After years of careful fine-tuning and improvements, we recently released kIQ® Plus, our most sophisticated therapy yet. Our products have empowered thousands of people to get back to their lives with confidence and ease.\nBut we won’t stop there. Our pioneering technology can be applied across neurology, cardiology, and beyond. It’s all part of our mission to help people in their struggle with chronic disease. We’re only just getting started\nThe Opportunity\nWe are seeking a skilled and proactive Security Engineer to join our cybersecurity team. In this role, you will be responsible for safeguarding our organization’s digital assets, infrastructure, and applications. You will play a critical part in identifying vulnerabilities, managing risks, orchestrating incident responses, and fostering a strong culture of security awareness across our engineering teams.\nThe ideal candidate is a blend of a technical defender and a strategic thinker-someone who can dive deep into dependency graphs today and lead a high-stakes tabletop simulation tomorrow.\nTitle: Security Engineer\nReports to: Staff DevOps Engineer\nLocation: Remote, Hybrid if local to our San Mateo, CA headquarters\nEmployment type: Full-Time, Exempt\nPay range: $155,000 - $190,000\n**Final compensation is based on experience, skills, market benchmarks, and internal equity, with potential adjustments for candidate location.**\n A Day in the Life\nVulnerability & Dependency Management\n Monitor and manage open-source and third-party dependencies using Software Composition Analysis (SCA) tools to identify and mitigate supply chain risks.\nTrack and prioritize Common Vulnerabilities and Exposures (CVEs) affecting our tech stack.\nCollaborate with development teams to automate dependency updates and integrate security scanning into the CI/CD pipeline.\nPenetration Testing & Vulnerability Assessment\nManage end-to-end scope, execution, and tracking of external Penetration Tests and bug bounty programs.\nAnalyze penetration testing reports, validate findings, and translate complex technical vulnerabilities into actionable remediation plans for engineering teams.\nConduct internal vulnerability scanning and architectural risk assessments.\nSecurity Remediation & Engineering\n Own and drive security remediation tasks across infrastructure, networks, and applications.\nProvide hands-on technical guidance and code/configuration reviews to developers to ensure secure coding practices are met.\nImplement security controls and guardrails (e.g., IAM policies, network segmentation, secrets management) to proactively reduce our attack surface.\nIncident Response & Threat Hunting\n Serve as a core member of the Incident Response (IR) team, participating in an on-call rotation to detect, contain, and eradicate security incidents.\nAnalyze security logs (SIEM, EDR, cloud provider logs) to investigate potential breaches or anomalous behavior.\nConduct post-incident reviews (root-cause analysis) and document lessons learned to continuously harden our defenses.\nResilience & Preparedness (Tabletop Exercises)\n Design, facilitate, and execute regular security tabletop exercises for both technical teams and executive leadership.\nDevelop realistic threat scenarios (e.g., ransomware, supply chain attacks) to test the efficacy of our incident response plans and identify gaps in communication or tooling.\nAdditional Responsibilities\n Cloud Security Posture Management (CSPM): Monitor and secure cloud infrastructure (AWS/GCP) configurations to prevent drift and misconfigurations.\n Security Metrics & Reporting: Define, track, and report on key security performance indicators (KPIs) like Mean Time to Remediate (MTTR) and patch compliance.\n Compliance Support: Assist in gathering evidence and maintaining controls for security frameworks and certifications (e.g., SOC 2, ISO 27001, HIPAA).\n Security Awareness: Champion a security-first culture by mentoring junior engineers and creating targeted security training content.\nQualifications & Skills\nRequired Experience\nBachelor’s degree in Computer Science, Software Engineering, or a related technical field\n3+ years of experience in Security Engineering, Application Security, or Incident Response.\nHands-on experience with modern security tooling (e.g., Snyk, Dependabot, Burp Suite, Splunk, Datadog).\nStrong understanding of OWASP Top 10, CWE, and cloud security best practices.\nHands-on experience with CI/CD pipelines and build automation tools (e.g., Jenkins, GitHub Actions, GitLab CI) to integrate security scanning and controls.\nProficiency in Python and Shell scripting (Bash) to automate security workflows and build security tooling.\nPreferred Qualifications\nFamiliarity with additional programming languages such as Go, JavaScript/TypeScript, or Rust for deeper code reviews and custom tooling.\nExperience securing cloud-native environments (Docker, AWS/GCP) and native AWS security tools (AWS Inspector, GuardDuty).\nHands-on experience with GRC platforms (e.g., Vanta).\nFamiliarity with Infrastructure as Code (IaC) security scanning (e.g., Checkov, TFLint).\nRelevant industry certifications (e.g., CISSP, CEH, OSCP, GCIH, AWS Certified Security).\nExcellent communication skills with the ability to articulate technical security concepts to non-technical stakeholders.\nFamiliarity with bug bounty services like BugCroud.\nExperience working on cloud connected IoT devices (provisioning, key rotation, OTA update security).\n\nApplicants must be authorized to work in the United States on a full-time basis, or eligible for work authorization through a sponsorship path that Cala Health is able to support. Sponsorship decisions are made individually based on role, timeline, and cost considerations, and are not guaranteed.\nCala Health believes our success is based on diversity of people, teams and thinking. We offer all employees the tools, training and mentoring they need to succeed. Our selection process is driven by the key requirements for the role rather than bias or discrimination on the basis of a candidate’s sex, gender identity, age, marital status, veteran status, non-jobrelated disability/handicap or medical condition, family status, sexual orientation, religion, color, ethnicity, race or any other legally protected classification.","description_format":"text","description_chars":6445,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Neurotech & Neuromodulation"],"lifecycle":[{"event":"open","at":"2026-09-12T10:36:39Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":152500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.578,"p_room":0.28,"age_days":75,"expected_fill_days":35,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/calahealth-security-engineer","json_url":"https://alion.io/job/calahealth-security-engineer.json","meta":{"generated_at":"2026-11-02T02:32:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3825,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":669478},"rest":"https://alion.io/mcp/rest/get_company?id=669478"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcalahealth-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcalahealth-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcalahealth-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/calahealth-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcalahealth-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":812913}},{"tool":"search_jobs","arguments":{"company":"calahealth.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":812913},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}