Security Engineer

About the role

Ceresti is seeking a Security Engineer to bridge the CISO office and Engineering, ensuring code is threat‑modeled, risk‑evaluated, and securely deployed. You will work closely with developers, building security tools, automation, and conducting attack simulations to uncover real gaps.

Key responsibilities

• Build and maintain threat models for new and existing systems, keeping them up‑to‑date as architecture evolves.
• Review checked‑in code for security flaws, own Snyk and Docker Scout findings, and drive remediation.
• Create security utility tools, scripts for logging and data parsing, and integrate security controls into developer tooling.
• Develop penetration tests and AI‑driven attack simulations using Dev, QA, and Test environments.
• Coordinate third‑party penetration testing for SOC 2 and HITRUST compliance.
• Contribute to security architecture, standards, and help secure the AWS cloud platform.

Required profile

• 5–7 years of software or security engineering experience.
• Proficient in writing code (Python, Go or similar) and comfortable on a development team.
• Hands‑on experience with threat modeling, dependency and container scanning, and code security reviews.
• Knowledge of cloud security in AWS and CI/CD pipeline security.
• Ability to think like an attacker and communicate findings effectively to engineers.

Required skills

• Python
• Go
• Snyk
• Docker Scout
• AWS
• CI/CD pipelines
• Threat modeling
• Penetration testing

What we offer

• Full‑time remote work
• Competitive base salary
• Comprehensive health, dental, and vision benefits
• Equity participation
• PTO and a collaborative, mission‑driven environment