Security Software Engineer

Insight Global; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Job summary

Rootly is seeking a security-focused leader to partner with engineering teams, shaping security strategy and architecture while enabling rapid product development. You will design and maintain tooling, embed security across pipelines, and drive initiatives in IAM, vulnerability management, and incident response.

The role requires hands-on software development and security program leadership in a fast-growing environment.

Qualifications

• 5+ years of hands-on software development experience.
• 3-4+ years of security engineering experience.
• Experience building and maturing security programs and tooling.
• Strong experience designing security controls within AWS cloud-native environments.
• Familiarity with Kubernetes and Ruby on Rails for tool development.
• Experience with AI-assisted development environments and modern AI engineering workflows.

Responsibilities

• Partner with engineering teams to build security solutions without slowing development velocity.
• Drive security strategy and architecture to support company growth.
• Design, build, and maintain security tooling and automation across the software lifecycle.
• Integrate security into cloud infrastructure, deployment pipelines, and app architecture.
• Lead initiatives across application security, IAM, vulnerability management, and incident response.

Skills

Security engineering

Team leadership

Developer enablement

Security programs

Software development

Tools

AWS cloud-native

Kubernetes

Ruby on Rails

IAM tooling

Job description

Job Description

Partner closely with engineering teams to understand their workflows and build security solutions that enable developer productivity while maintaining a strong security posture.

Drive Rootly's security strategy and architecture by assessing current controls, identifying gaps, and implementing scalable security practices that support company growth.

Design, build, and maintain security tooling and automation that embeds security throughout the software development lifecycle without slowing development velocity.

Work with engineers to integrate security into cloud infrastructure, deployment pipelines, and application architecture while balancing security, performance, and business objectives.

Lead initiatives across application security, infrastructure security, IAM, vulnerability management, risk management, incident response, and security controls.

Support customer-facing security efforts, including security questionnaires, audits, enterprise reviews, and compliance requirements.

Develop scalable security solutions that ensure the platform remains secure, reliable, and resilient as Rootly continues to grow.

Partner with engineering and QA teams to establish secure practices for AI-assisted development and modern software delivery.

Participate in a light on-call rotation and assist with security incident investigation and response.

Act as a technical leader and mentor, helping shape security best practices and the long-term growth of the security function.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 5+ years of hands-on software development experience
• 3-4+ years of security engineering experience
• Startup experience, preferably in a high-growth SaaS environment
• Experience building and maturing security programs, processes, and tooling, including assessing security posture, identifying gaps, and driving strategic improvements
• Strong experience designing and implementing security controls within AWS cloud-native environments
• Strong expertise in Kubernetes
• Proficiency in Ruby on Rails for tool development
• Strong application security expertise, including secure software development practices, developer enablement, and close partnership with engineering teams
• Experience with AI-assisted development environments and modern AI engineering workflowsExperience with infrastructure security, vulnerability management, IAM, and incident management
• Strong software engineering skills with experience building production-quality security automation and internal tooling.
• Strong communication skills and ability to influence stakeholders across technical and non-technical teams
• Experience supporting customer-facing security initiatives such as questionnaires, audits, and enterprise security reviews Experience working at a security-focused company or cybersecurity vendor
• Experience supporting enterprise customers with complex security requirements and review processes
• Previous team lead, tech lead, or player-coach experience
• Familiarity with Okta, SailPoint, or other identity and access management (IAM) platforms
• Experience supporting rapid organizational growth and evolving security maturity