Security Engineer

The role

This Security Engineer will secure AWS cloud architecture, modern CI/CD pipelines, and web/connected applications. The role involves shifting security left into build pipelines and ensuring cloud posture meets SOC 2 and healthcare compliance standards.

What you will do

• Architect, implement, and monitor security controls across the AWS environment.
• Define and enforce least-privilege IAM policies, VPC network isolation, and encryption.
• Use Infrastructure as Code security tooling to prevent cloud misconfigurations.
• Embed automated security gates into developer workflows and CI/CD pipelines.
• Own Software Composition Analysis to identify vulnerable dependencies and secure build artifacts.
• Build automation scripts to automate vulnerability triage and remediation workflows.
• Review application code, cloud architectures, and pull requests for vulnerabilities.
• Scope and manage external penetration tests and bug bounty programs.
• Secure APIs and backend endpoints interfacing with connected medical devices.
• Serve as the primary technical interface for SOC 2 Type II and HIPAA audits.

Required qualifications

• 3+ years of hands-on experience in Cloud Security, Application Security (AppSec), or DevSecOps within a production cloud-native engineering environment.
• Hands-on experience configuring and operating AWS native security services.
• Proven background integrating automated security checks into build pipelines using Jenkins and modern CI systems.
• Direct experience implementing, maintaining, and gathering automated evidence for technical controls in SOC 2 Type II audits.
• Strong understanding of OWASP Top 10, CWE, secure authentication/authorization, and modern API security patterns.
• Proficiency in Python or Shell scripting (Bash).

Nice to have

• Experience with Infrastructure as Code (IaC) and static analysis tools (e.g., Terraform).
• Familiarity with additional programming languages used by our engineering team (Python, Javascript).
• Experience with IoT or connected device ecosystems (device provisioning, mutual TLS, secure key rotation, and OTA update pipelines).
• Relevant industry certifications (e.g., AWS Certified Security – Specialty, AWS Solutions Architect, OSCP, or equivalent practical certifications).
• Familiarity with platforms like Vanta is a major plus.

Benefits

• Tools, training and mentoring

Before you apply

• Applicants must be authorized to work in the United States on a full-time basis, or eligible for work authorization through a sponsorship path that Cala Health is able to support.
• Sponsorship decisions are made individually and are not guaranteed.

About the company

Cala is working to free people from the burden of chronic disease. They created the first non-invasive prescription therapy for hand tremor.