Senior Security Engineer — Equity & Growth Opportunity

Roofr; Canada; On-site; CAD 120,000 - 180,000; Full time

Benefits offered by this job

PTO program

Friday off monthly

Holiday shutdown

Flexible time off

Job summary

Roofr is seeking an experienced Senior Security Engineer to strengthen our security posture as the company scales. You will own security infrastructure design across cloud environments, lead vulnerability management, and drive secure-by-design practices in collaboration with engineering, DevOps, and leadership.

Reporting to the VP of Engineering and working with the CTO, you will act as incident commander for security events, model risks for new features, and maintain compliance programs (NIST

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience.
• 5-8+ years in security engineering, incident response, or related roles, including as primary or senior responder.
• Certifications are a strong plus — CISSP, OSCP, GCIH, or CEH.

Responsibilities

• Own design and hardening of security infrastructure across cloud environments (networks, firewalls, IDS/IPS, VPNs, WAF, EDR).
• Lead vulnerability management end to end with assessments and remediation SLAs.
• Build and tune detection content (SIEM/SOAR rules, alerting) against real attack techniques.
• Act as incident commander for security incidents and perform post-incident reviews.
• Threat-model new features/infrastructure before shipping to catch design-level risk.

Skills

Security engineering

Incident response

AWS security

SIEM/SOAR

Python/Bash

Compliance awareness

Code literacy

Education

Bachelor's degree in CS/IT/cybersecurity

Tools

SIEM tooling

Cloud security tooling

Job description

Roofr is seeking an experienced Senior Security Engineer to strengthen our security posture as the company scales. You will own security infrastructure design across cloud environments, lead vulnerability management, and drive secure-by-design practices in collaboration with engineering, DevOps, and leadership.

Reporting to the VP of Engineering and working with the CTO, you will act as incident commander for security events, model risks for new features, and maintain compliance programs (NIST