Jobs in the United States

25+ jobs

Save this search

Added 1 min ago
Senior Test Engineer
Mercury Insurance Services, LLC
United States
Added 5 mins ago
Principal Engineer - Core Platform Services
Target Enterprise Inc
NCD-0375 Brooklyn Park, MN
Action Center. A shared service and API that platform teams use to publish the work they need from builders, such as instrumenting with OpenTelemetry or upgrading a runtime. It tracks that…
Added 5 mins ago
Sr Engineering Manager - Core Platform Services
Target Enterprise Inc
Minneapolis, MN
Action Center. A shared service and API that platform teams use to publish the work they need from builders, such as instrumenting with OpenTelemetry or upgrading a runtime. It tracks that…
Added 5 mins ago
C
Quality Engineer (AI & Test Automation)
Cognizant
Jefferson City, MO
- $65,000 USD / year
+ Perform API testing: Understand API concepts, develop and execute functional tests, interpret Swagger YAML files, and validate endpoints using Postman or Rest Assured automation…
Added 5 mins ago
Mobile Web Developer and Digital Lead
Insight Global
Radnor, PA
SmartMark Communications is seeking a highly skilled Web Developer & Digital Lead to oversee the development, maintenance, and growth of our digital ecosystem. This individual will serve as…
Added 5 mins ago
Data Integration Specialist
Caris MPI, Inc.
Irving, TX
Working experience with interface connectivity protocols, such as, VPNs, sFTP, API, HTTPS.
Added 5 mins ago
CyberArk Engineer/IAM/Remote
Kelly Services
Remote, United States
Added 6 mins ago
Lead java engineer with aws
TransUnion LLC
Crum Lynne, PA
Added 6 mins ago
Senior Mechanical Engineer - Mission Critical - Kansas City
Burns & McDonnell
Kansas City, MO
…knowledge of mechanical equipment design codes (ASME, ANSI, API, PIP, NACE). Strong computer skills (e.g. Microsoft Office…
Added 6 mins ago
Senior Software Engineer
Envista Holdings Corporation
Quakertown, PA
Added 6 mins ago
Sr Forward Deployed Engineer (Palantir Foundry & Custom Development)
Jacobs
Moon Township, PA
Added 6 mins ago
Systems Administrator, Document Management
Utilities Service, LLC
Horsham, PA
Support synchronous and asynchronous integration patterns, API management, document and enterprise data exchange requirements.
Added 6 mins ago
Upstream Process Scientist - Ambr250 (Sun-Thurs)
Eurofins US Network
Malvern, PA
Perform Upstream process development utilizing the Ambr250 Satorius system for large molecule based products within the API-Proteins group
Added 7 mins ago
Principal Fluid Systems Engineer
Westinghouse Electric Company
Cranberry Township, PA
Added 7 mins ago
Senior Mechanical Engineer - Nuclear (Multiple Locations)
Burns & McDonnell
Kansas City, MO
…knowledge of mechanical equipment design codes (ASME, ANSI, API, PIP, NACE). Strong computer skills (e.g. Microsoft Office…
Added 7 mins ago
ERP Analyst, Workday Support
St. Luke's University Health Network
Allentown, PA
Document, create, modify and test integrations with Workday, including but not limited to EIB, API
Added 7 mins ago
AWS Connect Developer
ASM Research, An Accenture Federal Services Company
Harrisburg, PA
The AWS Connect Developer designs, implements, and maintains cloud-based contact center solutions using Amazon Connect and integrated AWS serverless services. The role develops interactive…
Added 7 mins ago
C
Senior Mainframe CoolGen Developer
Cognizant
Harrisburg, PA
- $55,350 to $82,000 USD / year
We are looking for an experienced Senior Mainframe CoolGen Developer to design, develop, test, enhance, and support high-volume, reliable enterprise applications built on CA Gen/CoolGen and…
Added 8 mins ago
Sr Site Reliability Engineer -Remote US
SitusAMC
Harrisburg, PA
Implement best practices for configuring, tuning, and securing API’s/Microservices to achieve optimal performance and uptime
Added 8 mins ago
.NET API Developer
Cognizant
Harrisburg, PA
As a .NET API Developer , you will make an impact by designing and developing scalable, secure, and high-performing APIs and microservices that support critical banking applications. You…
Added 8 mins ago
Software Engineer
Teradata
Harrisburg, PA
…services, K8S, computer science fundamentals (e.g. RESTful API, algorithms), Git, and agile…
Added 8 mins ago
C
Java Angular Full-stack Lead (Remote - US/Canada)
Cognizant
Harrisburg, PA
- $138,000 to $162,000 USD / year
Strong experience with API-led architectures, messaging platforms such as Kafka, RabbitMQ, Azure Service Bus, and JMS.
Added 8 mins ago
Platform Engineer - Remote
SitusAMC
Harrisburg, PA
Enable developer self-service through reusable Terraform modules, standardized AWS environments, and automated provisioning workflows.
Added 8 mins ago
Software Engineer II
Amentum
Harrisburg, PA
The Software Engineer II will perform full stack development with C# program, ReactJS, MVC, Linq, and rest API development in NET Core platform. This position is US remote teleworking…
Added 8 mins ago
Full-Stack/UI Senior Software Engineer - 26375
Enverus
Pittsburgh, PA
…integration. You'll own features end-to-end, from UI mockup through API design, database schema, testing, and…

Cala Health

Security Engineer

United States

Remote

Title: Security Engineer (Cloud & AppSec) Reports to: Staff DevOps Engineer Location: Remote, but if local to San Mateo, CA - Hybrid Employment type: Full-Time, Exempt Pay range: $155,000 - $190,000

Apply About employer

Applications open in a new tab.

Job details

Pay: Title: Security Engineer (Cloud & AppSec) Reports to: Staff DevOps Engineer Location: Remote, but if local to San Mateo, CA - Hybrid Employment type: Full-Time, Exempt Pay range: $155,000 - $190,000
Workplace: Remote
Experience: 3+ years of hands-on experience in Cloud Security, Application Security (AppSec), or DevSecOps within a production cloud-native engineering environment.
Posting language: English
Posted: Nov 5, 2026

Original job description

About Cala

At Cala, we’re working to free people from the burden of chronic disease. We began by creating the first non-invasive prescription therapy for hand tremor. After years of careful fine-tuning and improvements, we recently released kIQ® Plus, our most sophisticated therapy yet. Our products have empowered thousands of people to get back to their lives with confidence and ease.

But we won’t stop there. Our pioneering technology can be applied across neurology, cardiology, and beyond. It’s all part of our mission to help people in their struggle with chronic disease. We’re only just getting started

The Opportunity

We are seeking a hands-on Security Engineer embedded within our engineering organization. In this role, you will be the primary technical authority securing our AWS cloud architecture, modern CI/CD pipelines, and web/connected applications. You will bridge software engineering, DevOps, and security - shifting security left into our build pipelines and ensuring our cloud posture remains audit-ready for SOC 2 and healthcare compliance standards.This is an engineering role, not an IT or corporate security role. The ideal candidate writes code, manages AWS infrastructure controls, integrates automated tooling into Jenkins and GitHub Actions CI/CD workflows, and partners directly with software engineers across the entire Software Development Life Cycle (SDLC).

Title: Security Engineer (Cloud & AppSec) Reports to: Staff DevOps Engineer Location: Remote, but if local to San Mateo, CA - Hybrid Employment type: Full-Time, Exempt Pay range: $155,000 - $190,000

Final compensation is based on experience, skills, market benchmarks, and internal equity, with potential adjustments for candidate location.

AWS Cloud Security & Infrastructure Hardening

Architect, implement, and monitor security controls across our AWS environment using native tooling (AWS GuardDuty, AWS Inspector, Security Hub, IAM Access Analyzer, KMS, and CloudTrail).
Define and enforce least-privilege IAM policies, VPC network isolation, and encryption in transit and at rest.
Use Infrastructure as Code (IaC) security tooling to proactively identify and prevent cloud misconfigurations before deployment.

DevSecOps & CI/CD Pipeline Security

Embed automated security gates into developer workflows and CI/CD pipelines (Jenkins, GitHub Actions, or GitLab CI) using SAST, DAST, and SCA scanning.
Own Software Composition Analysis (SCA) to identify vulnerable dependencies, manage container image scanning, and secure build artifacts against software supply chain risks.
Build automation scripts (Python, Bash) to automate vulnerability triage, evidence gathering, and security remediation workflows across build environments.

Application Security & Vulnerability Remediation

Review application code, cloud architectures, and pull requests to identify OWASP Top 10 vulnerabilities, auth flaws, and logic bugs early in development.
Scope and manage external penetration tests and bug bounty programs; validate findings and partner directly with engineering squads to write and verify technical remediation fixes.
Secure APIs and backend endpoints interfacing with connected medical devices and client applications.

Compliance Automation & Audit Readiness (SOC 2 / HIPAA)

Serve as the primary technical interface for SOC 2 Type II and HIPAA audits, partnering with DevOps to maintain technical security controls and automated evidence collection.
Leverage continuous compliance and posture management platforms (e.g., Vanta) to ensure production cloud infrastructure continuously meets audit baselines without manual overhead.

Engineering Incident Response

Investigate security alerts generated from AWS GuardDuty, Inspector, and production infrastructure logs.
Lead root-cause analysis (RCA) for application-level and cloud-level security events and build automated prevention mechanisms so the same class of incident cannot recur.

Qualifications & Skills

Required Experience

3+ years of hands-on experience in Cloud Security, Application Security (AppSec), or DevSecOps within a production cloud-native engineering environment.
Deep AWS Security Expertise: Hands-on experience configuring and operating AWS native security services (GuardDuty, Inspector, Security Hub, AWS Config, IAM policies, and VPC security).
CI/CD Security Automation: Proven background integrating automated security checks (SAST, SCA, container scanning) into build pipelines using Jenkins and modern CI systems (e.g., GitHub Actions, GitLab CI).
Compliance in Cloud Environments: Direct experience implementing, maintaining, and gathering automated evidence for technical controls in SOC 2 Type II audits (familiarity with platforms like Vanta is a major plus).
Application Security Fundamentals: Strong understanding of OWASP Top 10, CWE, secure authentication/authorization, and modern API security patterns.
Scripting & Automation: Proficiency in Python or Shell scripting (Bash) to automate security tooling, query APIs, and parse logs.

Preferred Qualifications

Experience with Infrastructure as Code (IaC) and static analysis tools (e.g., Terraform).
Familiarity with additional programming languages used by our engineering team (Python, Javascript).
Experience with IoT or connected device ecosystems (device provisioning, mutual TLS, secure key rotation, and OTA update pipelines).
Relevant industry certifications (e.g., AWS Certified Security – Specialty, AWS Solutions Architect, OSCP, or equivalent practical certifications).

Applicants must be authorized to work in the United States on a full-time basis, or eligible for work authorization through a sponsorship path that Cala Health is able to support. Sponsorship decisions are made individually based on role, timeline, and cost considerations, and are not guaranteed.

Cala Health believes our success is based on diversity of people, teams and thinking. We offer all employees the tools, training and mentoring they need to succeed. Our selection process is driven by the key requirements for the role rather than bias or discrimination on the basis of a candidate’s sex, gender identity, age, marital status, veteran status, non-jobrelated disability/handicap or medical condition, family status, sexual orientation, religion, color, ethnicity, race or any other legally protected classification.

Apply About employer

More about this job

Skills

AWS
CI/CD
DevOps
Regulatory compliance
Microsoft Access
Identity and access management
Infrastructure as code
Jenkins
GitHub
GitLab
Supply chain management
Python
Bash
Medical devices
Incident response
Root cause analysis
IBM Terraform
Programming languages
JavaScript
AWS certification
Coaching

Report this job