Senior Security Engineer

February 20

Apply Now

Receive Emails with Similar Jobs

Root Inc.

WebsiteLinkedInAll Job Openings

Root Inc. is an innovative car insurance company that utilizes mobile technology to offer personalized insurance rates based on individual driving behavior. The company operates through its app, which collects driving data via smartphone sensors, enabling it to provide more accurate and often cheaper auto insurance quotes for good drivers. Customers can manage their policies, file claims, and even earn rewards through the app, making it a convenient choice for users. Root Inc. emphasizes savings for safe drivers and provides additional features such as roadside assistance. Their services are available in various states across the U. S. , although some limitations apply depending on location.

Car Insurance • Mobile App • Technology • Automotive Telematics • Insurance

1001 - 5000 employees

Founded 2015

💳 Fintech

👥 B2C

📋 Description

• Enhance security posture and collaborate across departments. • Identify and mitigate security risks across software, infrastructure, and operations. • Implement robust security controls and advise on best practices. • Shape long-term security strategy while ensuring solutions remain secure and reliable. • Drive projects safeguarding products, infrastructure, and data. • Lead threat modeling sessions, security reviews, and assessments. • Collaborate with teams to integrate security best practices throughout the SDLC. • Implement and refine security monitoring, detection, and response capabilities. • Provide technical leadership and mentorship on secure coding and risk assessment. • Align security initiatives with compliance requirements.

🎯 Requirements

• At least three years of experience in application security, security engineering, or cloud security. • Strong understanding of cloud security principles in AWS, GCP, or Azure. • Proven ability to identify, assess, and mitigate security risks at scale. • Ability to translate security best practices into engineering requirements. • Strong understanding of the OWASP Top Ten and SAMM framework. • Experience performing threat modeling in an Agile environment. • Experience maintaining SAST and/or SCA tools. • Proficiency in scripting and automation using programming languages such as Python or Ruby. • Familiarity with common attack vectors, industry best practices, and risk mitigation strategies. • Experience working with compliance frameworks (e.g., SOC 2, PCI-DSS, NIST, ISO 27001). • Strong analytical abilities and excellent communication skills. • Willingness to participate in an on-call rotation to address critical security incidents.