Senior Security Engineer

Roofr as a Senior Security Engineer, where you'll play a crucial role in enhancing the company's security posture. You'll work closely with the VP of Engineering, CTO, and DevOps, and be responsible for designing and hardening security infrastructure, leading vulnerability management, building detection content, and acting as the incident commander for security incidents.

Responsibilities

• You'll also own IAM hygiene and cloud security posture, write and enforce security policies, manage Roofr's compliance program, run tabletop exercises, and push secure-by-design practices into engineering workflows.
• Enjoy a remote-first culture with generous benefits, including medical, dental, and vision insurance, parental leave, flexible time off, and ample learning and development opportunities.
• Contribuer directement à l'amélioration de la posture de sécurité de Roofr, en renforçant les mesures existantes et en les faisant progresser à mesure que l'entreprise se développe.
• Diriger la gestion des vulnérabilités de bout en bout, y compris l'exécution d'évaluations, la priorisation des vulnérabilités et la conduite des délais de remédiation avec l'ingénierie.
• Agir en tant que commandant d'incident pour les incidents de sécurité, en contenant, en éradiquant, en menant des enquêtes et en rédigeant des revues post-incident.
• Real incident response experience — triage, containment, forensics, root cause, not just theory from a course
• Hands-on cloud security in AWS — IAM policy design, VPC architecture, KMS/secrets management, CloudTrail/GuardDuty or equivalent

Requirements

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience
• 5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents
• Strong software engineer at heart — comfortable reading and writing real application code, not just scripts, so you can dig into the codebase directly instead of filing a ticket and waiting
• Working knowledge of SIEM/SOAR tooling, writing detection logic (Python/Bash), and building your own tooling when nothing off-the-shelf fits
• Fluent in compliance frameworks — NIST CSF 2.0, SOC 2, and CCPA/CPRA — and translating controls into policy people actually follow
• Deep network security fundamentals — firewalls, VPNs, routing/segmentation, network boundaries, TLS, DNS, and how attackers actually abuse them

Preferred

• Certifications are a strong plus — CISSP, OSCP, GCIH, or CEH
• Experience using AI/LLM tooling for threat intelligence — alert triage, detection summarization, or hunting workflows — not required, but a plus for a team building modern security practice from scratch

• Familiarity with GDPR — a plus as Roofr's customer base grows internationally
• Experience with PHP/Laravel — a plus for digging into Roofr's own codebase directly, not required
• Comfortable around Postgres — helpful, not required