Roofr

Overview

As a Senior Security Engineer, you will report to the VP of Engineering and work closely with the CTO and DevOps to improve Roofr's security posture. You will own security infrastructure, lead vulnerability management, act as an incident commander, and drive secure-by-design practices across the engineering organization.

About Roofr

Roofr is a CRM platform for the roofing industry that connects sales tools, aerial measurements, digital proposals, payments, and material ordering into a seamless, powerful platform. They are a successful, growing startup with a focus on customer-centric product development.

Requirements & Eligibility

• Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience
• 5-8+ years in security engineering, incident response, or related infrastructure roles
• Experience as the primary or senior responder on real incidents
• Deep network security fundamentals (firewalls, VPNs, routing/segmentation, TLS, DNS)
• Hands-on cloud security experience in AWS (IAM, VPC, KMS, CloudTrail/GuardDuty)
• Real incident response experience (triage, containment, forensics, root cause)
• Working knowledge of SIEM/SOAR tooling and detection logic
• Fluent in compliance frameworks (NIST CSF 2.0, SOC 2, CCPA/CPRA)

Key Responsibilities

• Own design and hardening of security infrastructure across cloud environments
• Lead vulnerability management end to end including assessments and remediation
• Build and tune detection content against real attack techniques
• Act as incident commander for security incidents
• Threat-model new features and infrastructure changes
• Own IAM hygiene and cloud security posture across production AWS accounts
• Write, enforce, and maintain security policies and standards
• Own Roofr's compliance program end to end