Senior Security Engineer, Enterprise Security

Rootly is hiring a Senior Security Engineer, Enterprise Security in Toronto, Canada. Level rates it ; you can apply on Rootly.

Level's read on this job

On Level's scale, this cybersecurity role is Little AI ●○○○: aI is not part of the work.
Level classes it as a senior role.
Rootly has 16 other open roles on Level.
Posted in the last few days.

AI in this role

About Rootly

At Rootly, we are on a mission to be the go-to way companies respond when things go wrong, helping every organization be more reliable. We do this by building an industry-leading incident management platform that allows companies around the world to consistently and quickly resolve incidents. We are not simply transforming an industry, we are carving out a new multi-billion-dollar category ourselves and need incredible talent to achieve this ambitious goal together.
Customers love Rootly. Some of the fastest-growing companies around the world such as NVIDIA, DoorDash, Uber, Canva, Tripadvisor, Squarespace and more rely on Rootly to power their critical incident management process. They obsess over our delightful enterprise-ready platform and unique partnership model. See why our customers have reviewed us 5 stars on G2.
Investors love Rootly. We are backed by some of the most respected funds in the world from Y Combinator to operators like the CTO of Dropbox and GitHub. We'd be happy to disclose our entire funding and profitability picture live during the interview. As a culture we relentlessly put transparency first. We conduct monthly financial reviews as a team so everyone has a pulse on the health of the business and publish what we are building in our weekly changelog.

About the Role

As a Senior Security Engineer focused on Enterprise Security, you'll own the security of how Rootly works internally: our identity and access layer, our device fleet, Zero Trust for internal access, the SaaS tools and vendors we rely on, and how we detect and respond to corporate security incidents. You'll select, stand up, and run much of our corporate security stack, including SIEM, EDR, MDM, and DLP.
You'll join a small security team and work alongside our existing AppSec and infrastructure owners, partnering with them on shared surfaces. This is a hands-on role with real ownership and a direct impact on how Rootly scales securely as we grow.

What You'll Do

Own Google Workspace security end to end, including SSO and MFA enforcement, OAuth app governance, and automated joiner, mover, and leaver lifecycle processes.
Lead our Cloudflare Zero Trust rollout for internal access, including Access, WARP, and device posture checks.
Select, roll out, and operate our endpoint and data protection tooling, including EDR, MDM, and DLP.
Stand up our SIEM and own corporate detection and response, including phishing, account takeover, and lost or compromised devices.
Run security reviews for new vendors and SaaS tools, and set governance for how the team adopts and uses AI tools.
Produce and maintain evidence for SOC 2 and support responses to customer security questionnaires.
Partner with our AppSec and infrastructure owners on shared surfaces such as identity, cloud access, and incident response.
Participate in the security on-call rotation for corporate security incidents, with clear escalation paths.

What You'll Need

We care more about execution, ownership, and impact than fancy degrees or FAANG experience. If the following resonates with you, we want to hear from you:

5+ years in enterprise or corporate security, security operations or IT security.
Strong access management experience, including Google Workspace administration, Google or Okta as an identity provider, access reviews, and least privilege.
Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution.
Hands-on experience selecting, deploying and running SIEM, EDR, MDM, and DLP tooling.
Proficiency in a scripting language (e.g. Python, Go, or Bash) to automate security and IT workflows.

Nice to Have

AWS security experience.
Experience leading a SOC 2 Type II audit.

Why Rootly?

We're not just another startup. We're building something category-defining and want teammates who crave ownership, love solving hard problems, and thrive in a high-bar, high-impact environment.
Here's what you can expect when you join Rootly:

Competitive compensation and early equity in a fast-growing, venture-backed company.
Comprehensive medical, dental, and vision coverage.
3 weeks of vacation, plus unlimited sick and mental health days, and a company-wide end-of-year shutdown to recharge.
$500 stipend for home office setup.
Unlimited token usage and access to AI tools.
A fast-moving, high-impact environment where your leadership and ideas directly shape the future of the company.

This is a newly created vacancy.
As we build out the team, we may use AI to support parts of our interview process, like reviewing assessments, but it's a tool that helps our people, not a substitute for their judgement.
If this sounds like the kind of challenge and opportunity you're looking for, apply now and let's build something great together.
Accommodations are available on request at any stage of our recruitment process. Contact recruitment@rootly.com and we will work with you to meet your needs confidentially.
Rootly is an equal opportunity employer. We do not discriminate on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, record of offences, marital status, family status, disability, or any other ground protected by the Ontario Human Rights Code or applicable law.

How we rate this

Senior Security Engineer, Enterprise Security at Rootly rates 33 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.