Backed by GV and Lux.
About the role
We are seeking a hands-on Security Engineer embedded within our engineering organization. In this role, you will be the primary technical authority securing our AWS cloud architecture, modern CI/CD pipelines, and web/connected applications. You will bridge software engineering, DevOps, and security—shifting security left into our build pipelines and ensuring our cloud posture remains audit-ready for SOC 2 and healthcare compliance standards.This is an engineering role, not an IT or corporate security role. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- 3+ years of hands-on experience in Cloud Security, Application Security (AppSec), or DevSecOps within a production cloud-native engineering environment
- Deep AWS Security Expertise: Hands-on experience configuring and operating AWS native security services (GuardDuty, Inspector, Security Hub, AWS Config, IAM policies, and VPC security)
- CI/CD Security Automation: Proven background integrating automated security checks (SAST, SCA, container scanning) into build pipelines using Jenkins and modern CI systems (e.g., GitHub Actions, GitLab CI)
- Compliance in Cloud Environments: Direct experience implementing, maintaining, and gathering automated evidence for technical controls in SOC 2 Type II audits (familiarity with platforms like Vanta is a major plus)
- Application Security Fundamentals: Strong understanding of OWASP Top 10, CWE, secure authentication/authorization, and modern API security patterns
- Scripting & Automation: Proficiency in Python or Shell scripting (Bash) to automate security tooling, query APIs, and parse logs
More about this role
About Cala
At Cala, we’re working to free people from the burden of chronic disease. We began by creating the first non-invasive prescription therapy for hand tremor. After years of careful fine-tuning and improvements, we recently released kIQ® Plus, our most sophisticated therapy yet. Our products have empowered thousands of people to get back to their lives with confidence and ease.
But we won’t stop there. Our pioneering technology can be applied across neurology, cardiology, and beyond. It’s all part of our mission to help people in their struggle with chronic disease. We’re only just getting started
We are seeking a hands-on Security Engineer embedded within our engineering organization. In this role, you will be the primary technical authority securing our AWS cloud architecture, modern CI/CD pipelines, and web/connected applications. You will bridge software engineering, DevOps, and security—shifting security left into our build pipelines and ensuring our cloud posture remains audit-ready for SOC 2 and healthcare compliance standards.This is an engineering role, not an IT or corporate security role. The ideal candidate writes code, manages AWS infrastructure controls,...
Browse similar: Startup jobs