Senior Security Engineer

• →Own design and hardening of security infrastructure across cloud environments — network segmentation, firewalls, IDS/IPS, VPNs, WAF, and endpoint detection and response (EDR)
• →Lead vulnerability management end to end: run assessments and authenticated scans, triage and prioritize by exploitability and blast radius, and drive remediation SLAs with engineering
• →Build and tune detection content (SIEM/SOAR rules, alerting logic) against real attack techniques — not just default vendor signatures
• →Act as incident commander for security incidents: contain, eradicate, run forensics, and write the post-incident review
• →Threat-model new features and infrastructure changes before they ship — catch design-level risk, not just implementation bugs
• →Own IAM hygiene and cloud security posture (least privilege, key/secret management, network boundaries) across production AWS accounts
• →Write, enforce, and maintain security policies and standards — own them as living controls, not documents that sit in a drive
• →Own Roofr's compliance program end to end: map controls to NIST CSF 2.0, SOC 2, and CCPA/CPRA, run the audits, close the gaps, and keep evidence current between them
• →Run tabletop exercises and incident playbook drills
• →Push secure-by-design practices into engineering workflows — threat modeling in design review, security requirements in the SDLC, not a gate bolted on at the end

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience
• 5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents
• Certifications are a strong plus — CISSP, OSCP, GCIH, or CEH

• Deep network security fundamentals — firewalls, VPNs, routing/segmentation, network boundaries, TLS, DNS, and how attackers actually abuse them
• Hands-on cloud security in AWS — IAM policy design, VPC architecture, KMS/secrets management, CloudTrail/GuardDuty or equivalent
• Real incident response experience — triage, containment, forensics, root cause, not just theory from a course
• Working knowledge of SIEM/SOAR tooling, writing detection logic (Python/Bash), and building your own tooling when nothing off-the-shelf fits
• Fluent in compliance frameworks — NIST CSF 2.0, SOC 2, and CCPA/CPRA — and translating controls into policy people actually follow
• Strong software engineer at heart — comfortable reading and writing real application code, not just scripts, so you can dig into the codebase directly instead of filing a ticket and waiting

• Confident being the only security voice in the room — makes the call and owns it
• Translates technical risk into business terms leadership can actually act on
• Calm and decisive under incident pressure; documents as they go, not after
• Ownership-oriented; builds the process that doesn't exist yet instead of waiting for one
• Strong individual contributor who wants to stay hands-on — this role builds the foundation directly, it doesn't lead from the side

• Experience using AI/LLM tooling for threat intelligence — alert triage, detection summarization, or hunting workflows — not required, but a plus for a team building modern security practice from scratch
• Familiarity with GDPR — a plus as Roofr's customer base grows internationally
• Experience with PHP/Laravel — a plus for digging into Roofr's own codebase directly, not required
• Comfortable around Postgres — helpful, not required

• 1st week of employment is mandatory PTO! Start your journey with Roofr by decompressing and recharging - we will see you in week 2!
• 1 Friday off per month (we call those our laundry days!)
• Company wide paid shutdown for the week between Christmas and New Years
• Flexible time off
• 80% employer-paid benefits in the U.S. and 100% employer-paid premiums for Extended Healthcare and Dental in Canada
• RRSP/401k match
• Generous Parental Leave policy

At Roofr, we’re big fans of AI. It helps us write job descriptions that don’t put you to sleep, takes notes during interviews so we can actually listen, and even helps us track down awesome humans like you.

Feel free to use AI to prep, research, or get pumped up for your interview (we see you, ChatGPT power users 👀). But when it’s time to chat, we’d love to meet you, not your AI alter ego. Bring your real, unfiltered self, we promise we will too.

And don’t worry, a real, live human is behind every part of our process. Every application is reviewed by a real person, and you’ll always speak with real humans throughout the interview process. No bots, just good people ☺️

⚠️ Important Notice

We’ve been made aware of an individual impersonating Roofr using a fraudulent domain: roofrr.com (note the extra “r”). Our company takes the security and privacy of job applicants very seriously. We will never ask for payment, bank details, or personal financial information as part of the application process. All our legitimate job postings can be found on our official career site. Please be cautious of job offers that come from non-company email addresses, instant messaging platforms, or unsolicited calls.

To ensure your application is legitimate, please apply directly through our official careers page: https://roofr.com/careers.

If you receive any suspicious messages or have questions, reach out to us at talent@roofr.com.

Your safety and security are important to us — thank you for your vigilance!

Roofr is proud to be an equal opportunity employer. We are committed to equal employment opportunity in the workplace regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or veteran status.