Roofr Senior Security Engineer at Roofr responsible for improving security posture by owning security infrastructure design and vulnerability management. Acts as incident commander and partners with engineering on secure-by-design practices.
Responsibilities
Own design and hardening of security infrastructure across cloud environments
Lead vulnerability management end to end
Build and tune detection content against real attack techniques
Act as incident commander for security incidents
Threat-model new features and infrastructure changes before they ship
Own IAM hygiene and cloud security posture across production AWS accounts
Write, enforce, and maintain security policies and standards
Own Roofr's compliance program end to end
Run tabletop exercises and incident playbook drills
Push secure-by-design practices into engineering workflows
Qualification
Bachelor's degree in computer science5-8+ years in security engineeringWorking knowledge of SIEM/SOAR toolingComfortable around Postgres — helpful🏠 What we offer (US + Canada)When you join our team🏝️ Vacation/Paid Time Off
Required
Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience
5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents
Certifications are a strong plus — CISSP, OSCP, GCIH, or CEH
Deep network security fundamentals — firewalls, VPNs, routing/segmentation, network boundaries, TLS, DNS, and how attackers actually abuse them
Hands-on cloud security in AWS — IAM policy design, VPC architecture, KMS/secrets management, CloudTrail/GuardDuty or equivalent
Real incident response experience — triage, containment, forensics, root cause, not just theory from a course
Working knowledge of SIEM/SOAR tooling, writing detection logic (Python/Bash), and building your own tooling when nothing off-the-shelf fits
Fluent in compliance frameworks — NIST CSF 2.0, SOC 2, and CCPA/CPRA — and translating controls into policy people actually follow
Strong software engineer at heart — comfortable reading and writing real application code, not just scripts, so you can dig into the codebase directly instead of filing a ticket and waiting
Confident being the only security voice in the room — makes the call and owns it
Translates technical risk into business terms leadership can actually act on
Calm and decisive under incident pressure; documents as they go, not after
Preferred
Experience using AI/LLM tooling for threat intelligence — alert triage, detection summarization, or hunting workflows — not required, but a plus for a team building modern security practice from scratch
Familiarity with GDPR — a plus as Roofr's customer base grows internationally
Experience with PHP/Laravel — a plus for digging into Roofr's own codebase directly, not required
Comfortable around Postgres — helpful, not required
Our compensation ranges are built using multiple market benchmarks and reflect both the scope of the role and current market data. While many hires fall within the beginning to midpoint of the band to allow for growth over time, we tailor offers based on each candidate’s experience, seniority, and demonstrated impact.
🏠 What we offer (US + Canada)
When you join our team, you’re not just accepting a job. You’re making a career move. Here’s how we’ll support you in doing some of the most impactful work of your career:
