Remote-First Senior Security Engineer: Cloud & IR

Roofr; San Francisco (CA); Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Vacation/Paid Time Off

Annual company retreats

Home office setup stipend

Internet and phone allowance

Remote first culture

Weekly paydays

Job summary

Roofr is seeking a Senior Security Engineer to partner with the CTO and VP of Engineering to strengthen Roofr's security posture as the company scales. You will own the tools and processes that detect and stop threats, and drive secure‑by‑design practices across engineering.

You’ll oversee vulnerability management, incident response, and compliance mappings (NIST CSF 2.0, SOC 2, CCPA/CPRA), while guiding security policy and secure development throughout the SDLC.

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands‑on experience
• 5–8+ years in security engineering, incident response, or related infrastructure roles
• Certifications are a strong plus — CISSP, OSCP, GCIH, or CEH

Responsibilities

• Own design and hardening of security infrastructure across cloud environments — network segmentation, firewalls, IDS/IPS, VPNs, WAF, and EDR
• Lead vulnerability management end to end: run assessments, triage, prioritize, drive remediation SLAs with engineering
• Build and tune detection content (SIEM/SOAR rules, alerting logic) against real attack techniques
• Act as incident commander for security incidents: contain, eradicate, forensics, post‑incident review
• Threat‑model new features and infrastructure changes before they ship
• Own IAM hygiene and cloud security posture across production AWS accounts
• Write, enforce, and maintain security policies and standards
• Own Roofr's compliance program end to end: map controls to NIST CSF 2.0, SOC 2, and CCPA/CPRA
• Run tabletop exercises and incident playbook drills
• Push secure‑by‑design practices into engineering workflows

Skills

Security engineering

Incident response

Threat modeling

Cloud security

Compliance frameworks

Software engineering

Education

Bachelor's degree in CS/IT/cybersecurity or equivalent

Tools

SIEM/SOAR tooling

Python/Bash scripting

AWS – IAM/VPC/KMS

Job description

Roofr is seeking a Senior Security Engineer to partner with the CTO and VP of Engineering to strengthen Roofr's security posture as the company scales. You will own the tools and processes that detect and stop threats, and drive secure‑by‑design practices across engineering.

You’ll oversee vulnerability management, incident response, and compliance mappings (NIST CSF 2.0, SOC 2, CCPA/CPRA), while guiding security policy and secure development throughout the SDLC.