Teams at Ceresti Health

Secure software and cloud environments through threat modeling, code review, vulnerability remediation, security automation, detection engineering, and attack simulations. The role partners closely with Engineering, manages Snyk and Docker Scout findings, integrates security into CI/CD, coordinates third-party penetration testing for SOC 2 and HITRUST, and helps define secure architecture for mobile, data lake, AI, and production cloud systems.

The GRC Analyst gathers audit evidence for SOC 2 and HITRUST, maintains security and privacy policies, coordinates with control owners, conducts vendor risk assessments, and supports HIPAA compliance and data lifecycle programs. The role documents control effectiveness, tracks policy acknowledgments, manages retention and disposal records, and escalates identified risks. It is a fully remote, early-career position reporting to the CISO.

The VP of HR will build and lead Ceresti’s people function, owning people strategy, organizational design, recruiting, compensation, benefits, performance, culture, employee relations, HR operations, and multi-state compliance. This executive will partner with the CEO and Board, develop scalable HR infrastructure for a remote workforce, manage HR technology and vendors, support healthcare compliance, and lead people initiatives related to growth, financing, M&A, and organizational change.