Senior Security Engineer

🔥 23 hours ago

🇨🇦 Canada – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Roofr

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🤝 B2B

🏪 Marketplace

💰 $12M Series A on 2022-09

SaaS • B2B • Marketplace

Roofr is a comprehensive software platform designed specifically for roofing businesses. It offers a suite of tools that streamline various aspects of roofing operations, including CRM, instant estimates, proposals, roof measurements, and integrated invoicing and payments. Roofr enables roofers to capture leads, create stunning proposals, manage job details, and order materials all from one platform. The software aims to improve efficiency, save time, and help roofing companies grow by consolidating multiple applications into one seamless workflow.

📋 Description

• Report to the VP of Engineering and work closely with the CTO and DevOps as part of Roofr's security guild • Design and harden security infrastructure across cloud environments, including network segmentation, firewalls, IDS/IPS, VPNs, WAF, and EDR • Lead vulnerability management end to end, including assessments, authenticated scans, triage, prioritization, and remediation SLAs • Build and tune SIEM/SOAR detection content and alerting logic against real attack techniques • Act as incident commander for security incidents; contain, eradicate, perform forensics, and write post-incident reviews • Threat-model new features and infrastructure changes before release • Own IAM hygiene and cloud security posture across production AWS accounts • Write, enforce, and maintain security policies and standards • Own Roofr's compliance program, mapping controls to NIST CSF 2.0, SOC 2, and CCPA/CPRA, running audits, closing gaps, and maintaining evidence • Run tabletop exercises and incident playbook drills • Embed secure-by-design practices into engineering workflows and the SDLC

🎯 Requirements

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience • 5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents • Certifications such as CISSP, OSCP, GCIH, or CEH are a strong plus • Deep network security fundamentals, including firewalls, VPNs, routing/segmentation, network boundaries, TLS, and DNS • Hands-on AWS cloud security, including IAM policy design, VPC architecture, KMS/secrets management, and CloudTrail/GuardDuty or equivalent • Real incident response experience covering triage, containment, forensics, and root cause analysis • Working knowledge of SIEM/SOAR tooling and writing detection logic with Python/Bash • Fluent in NIST CSF 2.0, SOC 2, and CCPA/CPRA compliance frameworks • Comfortable reading and writing real application code • Experience using AI/LLM tooling for threat intelligence is a plus • Familiarity with GDPR is a plus • Experience with PHP/Laravel is a plus • Comfort around Postgres is helpful

🏖️ Benefits

• 1st week of employment is mandatory PTO • 1 Friday off per month • Company-wide paid shutdown for the week between Christmas and New Year’s • Flexible time off • 80% employer-paid benefits in the U.S. • 100% employer-paid premiums for Extended Healthcare and Dental in Canada • RRSP/401k match • Generous Parental Leave policy • Annual company retreat with team-building activities • Learning and development opportunities • Home office setup stipend • Internet and phone allowance • Remote-first culture • Weekly Friday paydays • Equity • Significant growth opportunities