Senior Security Engineer

Career Tools

About This Role

Roofr is seeking a Senior Security Engineer to join its security guild and elevate the company's protection measures during a period of ongoing expansion. Reporting directly to the VP of Engineering while collaborating closely with the CTO and DevOps teams, this professional takes charge of safeguarding cloud infrastructure, managing vulnerabilities, and responding to security incidents. Roofr operates a specialized CRM platform connecting sales tools, digital proposals, aerial measurements, payments, and…

Job Description

Responsibilities

• Design and harden security infrastructure across cloud environments including firewalls, network segmentation, IDS/IPS, VPNs, WAF, and EDR
• Manage the complete vulnerability lifecycle from assessments and authenticated scans to prioritization and remediation enforcement with engineering
• Develop and refine detection logic and SIEM/SOAR rules against actual attack techniques
• Serve as incident commander to contain, eradicate, perform forensics, and draft post-incident reviews
• Conduct threat modeling on new features and infrastructure modifications prior to release
• Maintain identity and access management hygiene along with cloud security posture across production AWS accounts
• Draft, implement, and uphold living security policies and standards
• Manage the compliance program end to end by mapping controls to SOC 2, NIST CSF 2.0, and CCPA/CPRA, conducting audits, and closing gaps
• Execute tabletop exercises and drills for incident playbooks
• Integrate secure-by-design principles into standard software development life cycle workflows

Requirements

• 5 to 8 or more years of professional experience in security engineering, incident response, or related infrastructure roles
• Demonstrated background serving as the primary or senior responder during actual security incidents
• Thorough understanding of network security fundamentals covering routing, segmentation, boundaries, TLS, DNS, and firewalls
• Hands-on cloud security expertise in AWS including IAM design, VPC architecture, secrets management, and GuardDuty or CloudTrail
• Practical background in incident response activities such as triage, containment, forensics, and root-cause analysis
• Proficiency with SIEM/SOAR tools, creating detection logic using Python or Bash, and building custom internal tooling
• Familiarity with compliance frameworks including SOC 2, NIST CSF 2.0, and CCPA/CPRA
• Ability to read and write application code directly

Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, or equivalent hands-on experience
• Professional certifications such as CISSP, OSCP, GCIH, or CEH
• Experience leveraging AI and LLM tooling for threat intelligence, alert triage, detection summarization, or hunting workflows
• Familiarity with GDPR compliance as customer bases expand internationally
• Experience working with PHP and Laravel for codebase analysis
• Familiarity with Postgres databases

Core Skills

Benefits

• Mandatory paid time off during the first week of employment
• One Friday off per month
• Company-wide paid shutdown for the week between Christmas and New Year's
• Flexible time off
• 80% employer-paid benefits for employees in the United States
• 100% employer-paid premiums for extended healthcare and dental in Canada
• RRSP and 401k matching programs
• Generous parental leave policy
• Annual company retreat with team-building activities
• Learning and development opportunities
• Home office setup stipend alongside internet and phone allowances
• Weekly Friday paydays

Frequently Asked Questions

Answers are based only on the employer’s listing; where it doesn’t say, neither do we.

Sample Interview Questions

AI-generated questions tailored to this specific role — a preview of the full practice set.