{"id":2964138,"url":"https://alion.io/job/ceresti-security-engineer","title":"Security Engineer","company":{"id":3865310,"name":"Ceresti","domain":"ceresti.com","url":"https://alion.io/company/ceresti","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":123000,"max_usd":221000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":390},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Go","optional":false},{"name":"Python","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-20T21:44:00Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-01T06:00:52Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"About Ceresti\nCeresti is on a mission to reduce avoidable hospitalizations and improve care for people living with dementia while improving the lives of their families and caregivers. We envision a world in which family caregivers of people living with dementia are supported and have the knowledge, skills, and confidence to provide the best possible care for their loved ones.\nCeresti is a tech-enabled dementia care provider with a differentiated model of care that improves outcomes and delivers guaranteed cost savings by including family caregivers in the care team. We offer health plans and accountable care organizations a turnkey solution for engaging a population that has limited participation in traditional clinical programs.\nOur culture is rooted in agility, innovation, and collaboration. We believe every idea-no matter how small-can spark a meaningful improvement. Together, we create solutions that make a lasting impact on the healthcare ecosystem, enabling more compassionate and cost-effective care for those who need it most.\nThe Role\nCeresti's engineering team is writing a lot of code. This role makes sure it is safe: threat modeled, risk evaluated, dependency-checked, and tested by someone who knows how an attacker would approach it.\nThe Security Engineer is the bridge between the CISO's office and Engineering. You will sit with developers, read their code, and write your own: security utility tools, automation, logging and parsing scripts, and the integrations that turn raw signal into smarter controls. Security has a front end, a back end, and a lot of scripts, and most of the work is integrating systems and automating the tooling developers already use.\nYou will also break things on purpose. We want someone who builds attack simulations (using AI and the tools we already run) and uses Dev, QA, and Test as a sandbox to prove where the real gaps are rather than arguing about them in the abstract.\nYour main working partner is Engineering. You will occasionally build something IT runs in Microsoft 365 for example, and IT is often the end user of those tools.\nWhat You Will Do\nSecure the code Engineering writes\nBuild and maintain threat models for new and existing systems and features, and keep them current as architecture changes.\nRead checked-in code and assess its security. This role reviews code; it does not only review reports about code.\nOwn Snyk and Docker Scout: thresholds, findings, and driving remediation with the owning teams.\nReview the software bill of materials for outdated or vulnerable components and push fixes through to closure.\nReview SAST and DAST output, prioritize what matters, and work the remediation with engineers directly.\nWrite security tooling and automation\nBuild security utility tools and automation that Engineering and the wider company use.\nWrite scripts for logging, data parsing, and signal enrichment that make controls smarter rather than noisier.\nIntegrate security systems with developer tooling so the safe path is the convenient one.\nBuild and tune detection logic and automation that the Security Analyst operates day to day.\nProve the gaps are real\nBuild penetration tests and attack simulations using AI and the tools we already run, and use Dev, QA, and Test as a test bed to demonstrate real exposure.\nFeed results from Pentest-Tools and internal testing back into what you build next.\nScope, coordinate, and manage the independent third-party penetration test required for SOC 2 and HITRUST, and track findings to closure.\nShape the architecture\nContribute to security architecture and standards, as well as detection logic.\nRepresent security in engineering initiatives including the mobile app, tablet software, the data lake, and AI and machine-learning work.\nHelp secure the production cloud environment (AWS via Aptible) as part of Engineering's platform, as code wherever possible.\nWhat Success Looks Like\nIn the first year, we would expect to see:\nThreat models exist for the major systems and stay current as architecture changes.\nDependency and container findings from Snyk and Docker Scout are triaged accurately and driven to closure, not just reported.\nEngineering consults you early on mobile, tablet, data lake, and AI work.\nSecurity tooling you wrote is in day-to-day use, and detections reach the Security Analyst with low noise.\nAttack simulations have surfaced at least one real gap that nobody had argued for on paper.\nThe annual third-party penetration test is scoped, scheduled, and tracked to closure.\nWhat You Bring\nRequired\nFive to seven years in software or security engineering. Not a first engineering job.\nYou write code comfortably and would be at home on a development team. Python, Go, or similar.\nHands-on application security: threat modeling, dependency and container scanning, and reading code for security flaws.\nWorking knowledge of cloud security in AWS, and of CI/CD pipelines and where security fits in them.\nOffensive fundamentals: you can think like an attacker and build a test that proves a point.\nThe ability to explain a finding to an engineer in terms they will act on.\nPreferred\nExperience with Snyk, Docker Scout, or comparable SAST, SCA, and container tooling.\nDetection engineering: writing and tuning rules that hold up in production.\nAn OSCP-type certification, or equivalent demonstrable offensive work.\nHealthcare, or another environment handling regulated data.\nExperience in a company where security was being built rather than inherited.\nHow you work\nYou like to experiment, and you want a test bed rather than permission.\nYou want help thinking through architecture, and you will ask for it. This role has room to grow into that.\nYou would rather demonstrate a gap, then document it so it gets fixed.\nYou treat engineers as colleagues to work alongside, not as an audience to review.\nWhat We Offer\nFull-time remote work\nCompetitive base salary with final offer based on experience, skills, and location\nComprehensive health, dental, and vision benefits\nEquity participation in a growing healthcare technology company\nPTO and a culture that respects it\nA collaborative, mission-driven environment where your work directly supports family caregivers and improves outcomes for people living with dementia\nAdditional Information\nEmployment is contingent on successful completion of a background check, consistent with applicable law.\nCeresti is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by law.","description_format":"text","description_chars":6770,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Medical AI","Primary Care & Medical Centers"],"lifecycle":[{"event":"open","at":"2026-10-20T23:37:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":1,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":11,"expected_fill_days":35,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/ceresti-security-engineer","json_url":"https://alion.io/job/ceresti-security-engineer.json","meta":{"generated_at":"2026-11-01T09:21:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3865310},"rest":"https://alion.io/mcp/rest/get_company?id=3865310"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fceresti-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fceresti-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fceresti-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ceresti-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fceresti-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2964138}},{"tool":"search_jobs","arguments":{"company":"ceresti.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2964138},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}