Search Remote Jobs

Senior Security Engineer

🕒 September 15

🇨🇦 Canada – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Where this job comes from

Posted on Roofr's careers page, not through a job board

First seen by Remote Rocketship September 15

Still open on Roofr's site. Checked 7 hours ago.

Logo of Roofr

Roofr

51 - 200 employees

☁️ SaaS

🤝 B2B

🏪 Marketplace

💰 $12M Series A on 2022-09

SaaS • B2B • Marketplace

Roofr is a comprehensive software platform designed specifically for roofing businesses. It offers a suite of tools that streamline various aspects of roofing operations, including CRM, instant estimates, proposals, roof measurements, and integrated invoicing and payments. Roofr enables roofers to capture leads, create stunning proposals, manage job details, and order materials all from one platform. The software aims to improve efficiency, save time, and help roofing companies grow by consolidating multiple applications into one seamless workflow.

📋 Description

• Report to the VP of Engineering and work closely with the CTO and DevOps as part of Roofr's security guild • Design and harden security infrastructure across cloud environments, including network segmentation, firewalls, IDS/IPS, VPNs, WAF, and EDR • Lead vulnerability management end to end, including assessments, authenticated scans, triage, prioritization, and remediation SLAs • Build and tune SIEM/SOAR detection content and alerting logic against real attack techniques • Act as incident commander for security incidents; contain, eradicate, perform forensics, and write post-incident reviews • Threat-model new features and infrastructure changes before release • Own IAM hygiene and cloud security posture across production AWS accounts • Write, enforce, and maintain security policies and standards • Own Roofr's compliance program, mapping controls to NIST CSF 2.0, SOC 2, and CCPA/CPRA, running audits, closing gaps, and maintaining evidence • Run tabletop exercises and incident playbook drills • Embed secure-by-design practices into engineering workflows and the SDLC

🎯 Requirements

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience • 5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents • Certifications such as CISSP, OSCP, GCIH, or CEH are a strong plus • Deep network security fundamentals, including firewalls, VPNs, routing/segmentation, network boundaries, TLS, and DNS • Hands-on AWS cloud security, including IAM policy design, VPC architecture, KMS/secrets management, and CloudTrail/GuardDuty or equivalent • Real incident response experience covering triage, containment, forensics, and root cause analysis • Working knowledge of SIEM/SOAR tooling and writing detection logic with Python/Bash • Fluent in NIST CSF 2.0, SOC 2, and CCPA/CPRA compliance frameworks • Comfortable reading and writing real application code • Experience using AI/LLM tooling for threat intelligence is a plus • Familiarity with GDPR is a plus • Experience with PHP/Laravel is a plus • Comfort around Postgres is helpful

🏖️ Benefits

• 1st week of employment is mandatory PTO • 1 Friday off per month • Company-wide paid shutdown for the week between Christmas and New Year’s • Flexible time off • 80% employer-paid benefits in the U.S. • 100% employer-paid premiums for Extended Healthcare and Dental in Canada • RRSP/401k match • Generous Parental Leave policy • Annual company retreat with team-building activities • Learning and development opportunities • Home office setup stipend • Internet and phone allowance • Remote-first culture • Weekly Friday paydays • Equity • Significant growth opportunities

Apply Now

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

🕒 September 11

Cohere

11 - 50

🤖 Artificial Intelligence

🏢 Enterprise

☁️ SaaS

Product Security Engineer securing Cohere’s enterprise AI products and foundation models. Reviewing architecture, threat modeling capabilities, and testing vulnerabilities across production systems.

🕒 September 3

ComPsych

1001 - 5000

🏥 Healthcare

💼 Consulting

📦 Logistics

Senior Cloud Security Engineer securing ComPsych’s cloud-based mental health and absence-management platforms. Building cloud, application, data, AI, detection, and compliance controls.

AWS

Azure

Cloud

Firewalls

🕒 August 28

Coinbase

1001 - 5000

💼 Consulting

₿ Crypto

💸 Finance

Product Security Engineer using frontier AI to discover vulnerabilities and red-team AI systems at Coinbase. Building offensive security tooling and automating vulnerability response workflows.

🇨🇦 Canada – Remote

💵 $154k / year

💰 $21.4M Post-IPO Equity on 2022-11

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🕒 August 26

Motive

1001 - 5000

📦 Logistics

🏗️ Construction

🍽️ Food & Beverage

Senior Security Engineer securing hardware, firmware, and IoT systems for Motive’s AI-powered fleet management platform. Building secure-by-default components, threat models, and device security processes.

🕒 August 26

Motive

1001 - 5000

📦 Logistics

🏗️ Construction

🍽️ Food & Beverage

Senior Security Engineer securing Motive’s connected fleet hardware and embedded systems. Building secure-by-default architecture, threat models, and controls across IoT devices and cloud infrastructure.

Developed by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok