Senior Security Engineer

🕒 il y a 2 mois

🇺🇸 États-Unis – Télétravail

💵 $111 500 - $139 400 / an

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 24%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Root Inc.

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2015

🚘 Automobile

💼 Conseil

🛡️ Assurance

💰 €200 000 000 Post IPO debt en 2024-11

Automotive • Consulting • Insurance

null

Description

• Establish the data security strategy and roadmap for sensitive policyholder, customer, employee, and corporate data • Protect PII, financial information, health-related information, claims data, and other regulated or confidential data across the full lifecycle • Establish standards for data classification, encryption, key management, masking, tokenization, anonymization, pseudonymization, retention, deletion, and secure data sharing • Design and improve data access governance, including least privilege, RBAC/ABAC, privileged access, row-level controls, column-level controls, and periodic access reviews • Partner with Data Platform and Analytics teams to embed security controls into data pipelines, warehouses, data lakes, reporting platforms, and machine learning workflows • Improve visibility into sensitive data stores, data flows, third-party transfers, and access patterns through discovery, monitoring, DLP, and related security tooling • Establish secure backup, recovery, and resilience requirements for critical data • Translate regulatory and business requirements into practical technical controls and measurable risk-reduction initiatives • Lead cross-functional prioritization and support SOC 2 readiness • Automate security workflows using scripting, APIs, policy-as-code, and approved AI-assisted tools • Develop playbooks, reference architectures, and reusable patterns • Participate in the Security Engineering on-call rotation, triaging alerts and responding to after-hours escalations as needed • Communicate data security risks, decisions, and recommendations to engineers, business stakeholders, and senior leadership • Coach engineering and analytics teams on secure data handling and improve organizational data security maturity

🎯 Exigences

• 5+ years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical field • Hands-on experience securing sensitive data in cloud environments across storage, processing, analytics, and data-sharing systems • Experience with several of: IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging • Experience embedding security requirements into data platforms, data pipelines, analytics workflows, or application architectures • Experience working with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams • Experience improving security operations through automation, scripting, integrations, policy-as-code, or systematic process improvement • Familiarity with privacy, security, and regulatory requirements such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks • Strong communication skills and ability to explain technical risks and tradeoffs to engineers and senior leadership • Ability to balance security requirements with business needs and build stakeholder alignment • Sound judgment when using approved AI-assisted tools with confidential, proprietary, or regulated information • Preferred: experience in insurance, financial services, healthcare, or another regulated industry • Preferred: experience with data security posture management, data activity monitoring, enterprise DLP, or cloud data security platforms • Preferred: familiarity with major cloud providers and cloud-native data services • Preferred: experience with infrastructure-as-code, CI/CD security, policy-as-code, or security automation • Preferred: experience supporting SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, ISO 27001, or similar compliance programs • Preferred: familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or comparable platforms • Candidates must be on camera for virtual interviews

🏖️ Avantages

• Eligible for competitive bonus • Equity offering • Flexible location/work where it works best across the US • Reasonable accommodation throughout the hiring process