Senior Security Engineer

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Root Inc.

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2015

🚘 Automotive

💼 Consulting

🛡️ Insurance

💰 $200M Post IPO debt on 2024-11

Automotive • Consulting • Insurance

Root Inc. is an auto insurance company that uses a mobile app and smartphone sensor telematics to measure driving behavior and price policies primarily based on how safely customers drive. The company offers a "test drive" period to gather driving data, provides in-app quotes, policy management, and claims filing, and sells roadside assistance and other coverages across many U. S. states. Root targets consumer drivers (B2C) seeking usage-based insurance and emphasizes savings for safer drivers.

📋 Description

• Establish the data security strategy and roadmap for sensitive policyholder, customer, employee, and corporate data • Protect PII, financial information, health-related information, claims data, and other regulated or confidential data across the full lifecycle • Establish standards for data classification, encryption, key management, masking, tokenization, anonymization, pseudonymization, retention, deletion, and secure data sharing • Design and improve data access governance, including least privilege, RBAC/ABAC, privileged access, row-level controls, column-level controls, and periodic access reviews • Partner with Data Platform and Analytics teams to embed security controls into data pipelines, warehouses, data lakes, reporting platforms, and machine learning workflows • Improve visibility into sensitive data stores, data flows, third-party transfers, and access patterns through discovery, monitoring, DLP, and related security tooling • Establish secure backup, recovery, and resilience requirements for critical data • Translate regulatory and business requirements into practical technical controls and measurable risk-reduction initiatives • Lead cross-functional prioritization and support SOC 2 readiness • Automate security workflows using scripting, APIs, policy-as-code, and approved AI-assisted tools • Develop playbooks, reference architectures, and reusable patterns • Participate in the Security Engineering on-call rotation, triaging alerts and responding to after-hours escalations as needed • Communicate data security risks, decisions, and recommendations to engineers, business stakeholders, and senior leadership • Coach engineering and analytics teams on secure data handling and improve organizational data security maturity

🎯 Requirements

• 5+ years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical field • Hands-on experience securing sensitive data in cloud environments across storage, processing, analytics, and data-sharing systems • Experience with several of: IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging • Experience embedding security requirements into data platforms, data pipelines, analytics workflows, or application architectures • Experience working with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams • Experience improving security operations through automation, scripting, integrations, policy-as-code, or systematic process improvement • Familiarity with privacy, security, and regulatory requirements such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks • Strong communication skills and ability to explain technical risks and tradeoffs to engineers and senior leadership • Ability to balance security requirements with business needs and build stakeholder alignment • Sound judgment when using approved AI-assisted tools with confidential, proprietary, or regulated information • Preferred: experience in insurance, financial services, healthcare, or another regulated industry • Preferred: experience with data security posture management, data activity monitoring, enterprise DLP, or cloud data security platforms • Preferred: familiarity with major cloud providers and cloud-native data services • Preferred: experience with infrastructure-as-code, CI/CD security, policy-as-code, or security automation • Preferred: experience supporting SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, ISO 27001, or similar compliance programs • Preferred: familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or comparable platforms • Candidates must be on camera for virtual interviews

🏖️ Benefits

• Eligible for competitive bonus • Equity offering • Flexible location/work where it works best across the US • Reasonable accommodation throughout the hiring process