Security Engineer

Job not on LinkedIn

🔥 12 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Ceresti Health

Ceresti Health

11 - 50 employees

Founded 2013

🏥 Healthcare

⚕️ Healthcare Insurance

🤝 B2B

💰 $11.7M Venture Round - Ceresti Health on 2025-08

Healthcare • Healthcare Insurance • B2B

Ceresti Health is a tech-enabled care company that partners with health plans and accountable care organizations (ACOs) to support family caregivers of people living with dementia. The company combines claims-data driven risk stratification, caregiver education, a tablet-based platform, and weekly personal care navigators to improve care plan adherence, close social determinants of health gaps, and proactively detect changes in patients' conditions. Ceresti’s caregiver-led program has independently validated results showing substantial reductions in avoidable hospitalizations and per-patient medical costs, and it offers no-risk, outcomes-based contracts for payers.

📋 Description

• Build and maintain threat models for new and existing systems and features • Read checked-in code and assess its security • Own Snyk and Docker Scout thresholds, findings, and remediation • Review software bills of materials for outdated or vulnerable components and drive fixes to closure • Review SAST and DAST output, prioritize findings, and coordinate remediation with engineers • Build security utility tools and automation for Engineering and the wider company • Write logging, data parsing, and signal-enrichment scripts • Integrate security systems with developer tooling • Build and tune detection logic and automation for the Security Analyst • Build penetration tests and AI-assisted attack simulations • Use Dev, QA, and Test environments to demonstrate real exposure • Feed Pentest-Tools and internal testing results into future security tooling • Scope, coordinate, and manage the independent third-party penetration test required for SOC 2 and HITRUST • Track penetration-test findings to closure • Contribute to security architecture, standards, and detection logic • Represent security in mobile app, tablet software, data lake, and AI/ML initiatives • Help secure the AWS production cloud environment via Aptible, using infrastructure as code where possible • Collaborate directly with Engineering as the primary working partner and occasionally build tools for IT in Microsoft 365

🎯 Requirements

• Five to seven years in software or security engineering • Comfortable writing code; Python, Go, or similar • Hands-on application security experience, including threat modeling, dependency and container scanning, and reading code for security flaws • Working knowledge of AWS cloud security • Working knowledge of CI/CD pipelines and security integration • Offensive security fundamentals; ability to think like an attacker and build tests that prove security issues • Ability to explain security findings to engineers in actionable terms • Experience with Snyk, Docker Scout, or comparable SAST, SCA, and container tooling preferred • Detection engineering experience preferred • OSCP-type certification or equivalent demonstrable offensive work preferred • Healthcare or other regulated-data environment experience preferred • Experience building security in a company where it was not inherited preferred • Employment contingent on successful completion of a background check, consistent with applicable law

🏖️ Benefits

• Full-time remote work • Competitive base salary with final offer based on experience, skills, and location • Comprehensive health, dental, and vision benefits • Equity participation in a growing healthcare technology company • PTO and a culture that respects it • Collaborative, mission-driven environment • Work that directly supports family caregivers and improves outcomes for people living with dementia

Apply Now

Similar Jobs

🔥 12 hours ago

Remote Security Control Assessor Liaison coordinating DoD RMF assessments, documentation, and remediation. Supporting federal cybersecurity compliance for JMA Resources’ government clients.

🔥 13 hours ago

Upwind Security

51 - 200

🔐 Security

☁️ SaaS

Security Engineer strengthening Upwind’s cloud security platform and MDR operations for U.S. customers. Investigating complex threats, improving detection, and guiding customers during critical incidents.

🔥 14 hours ago

Empower

10,000+ employees

💸 Finance

💳 Fintech

👥 B2C

Security Engineer strengthening Empower’s financial services security with DLP, insider-threat detection, SIEM tuning, and AWS automation. Remote nationwide role requiring U.S. work authorization.

🔥 14 hours ago

Leidos

10,000+ employees

🏥 Healthcare

💼 Consulting

📦 Logistics

Leidos IT manager leading cybersecurity, systems integration, and technical teams for a military telehealth support contract. Overseeing secure, reliable healthcare technology operations.

🔥 14 hours ago

Avantor

10,000+ employees

🏥 Healthcare

🏭 Manufacturing

💼 Consulting

Global security manager protecting Avantor’s life-science operations through enterprise security, risk management, and emergency preparedness. Leading resilience, crisis response, workplace violence prevention, and security governance.