Senior Security Engineer
Core
Senior Security Engineer responsible for designing and hardening security infrastructure, managing incident response, and driving compliance programs for a cloud-native platform.
Role type
Senior Security Engineer (Cloud & Infrastructure)
Builds
Security infrastructure, detection rules, compliance controls, and secure-by-design practices for Roofr's cloud environment.
Domain
Cybersecurity, Cloud Security (AWS), Compliance
Required skills
Network security, Cloud security (AWS), Incident response, SIEM/SOAR, Compliance frameworks, IAM, Threat modeling, Python/Bash scripting
Preferred skills
CISSP, OSCP, GCIH, CEH, AI/LLM tooling for threat intelligence, GDPR, PHP/Laravel, Postgres
Technologies
AWS, SIEM, SOAR, Python, Bash, NIST CSF 2.0, SOC 2, CCPA/CPRA, WAF, EDR, IDS/IPS
Responsibilities
Design and harden security infrastructure across cloud environments; Lead vulnerability management end to end; Build and tune detection content; Act as incident commander for security incidents; Threat-model new features and infrastructure changes; Own IAM hygiene and cloud security posture; Write, enforce, and maintain security policies and standards; Own Roofr's compliance program end to end.
Seniority
Senior, hands-on IC
