FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security engineering and incident response, with a strong focus on cloud security, compliance frameworks, and vulnerability management. Proficient in designing security infrastructure and embedding secure practices within engineering workflows.
Highest-signal resume keywords
Security EngineeringIncident ResponseAWS Cloud SecurityVulnerability ManagementCompliance Frameworks
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Network Security FundamentalsVulnerability ManagementIncident ResponseSIEM/SOAR Detection LogicAWS IAM Policy DesignPythonBashForensicsThreat ModelingCloud Security Posture
Soft Skills
LeadershipCollaborationCommunication
Tools & Technologies
AWSSIEMSOARVPNFirewallsEDRWAFKMSCloudTrailGuardDuty
Certifications & Qualifications
CISSPOSCPGCIHCEH
Industry Keywords
NIST CSF 2.0SOC 2CCPACPRAGDPR
Tech Stack
Tools & technologiesAWSCloudCyber SecurityDNSFirewallsLaravelPHPPostgresPythonSDLC
About the role
Key responsibilities & impact- Report to the VP of Engineering and work closely with the CTO and DevOps as part of Roofr's security guild
- Design and harden security infrastructure across cloud environments, including network segmentation, firewalls, IDS/IPS, VPNs, WAF, and EDR
- Lead vulnerability management end to end, including assessments, authenticated scans, triage, prioritization, and remediation SLAs
- Build and tune SIEM/SOAR detection content and alerting logic against real attack techniques
- Act as incident commander for security incidents; contain, eradicate, perform forensics, and write post-incident reviews
- Threat-model new features and infrastructure changes before release
- Own IAM hygiene and cloud security posture across production AWS accounts
- Write, enforce, and maintain security policies and standards
- Own Roofr's compliance program, mapping controls to NIST CSF 2.0, SOC 2, and CCPA/CPRA, running audits, closing gaps, and maintaining evidence
- Run tabletop exercises and incident playbook drills
- Embed secure-by-design practices into engineering workflows and the SDLC
Requirements
What you’ll need- Bachelor's degree in computer science, IT, cybersecurity, or equivalent hands-on experience
- 5-8+ years in security engineering, incident response, or related infrastructure roles, including time as the primary or senior responder on real incidents
- Certifications such as CISSP, OSCP, GCIH, or CEH are a strong plus
- Deep network security fundamentals, including firewalls, VPNs, routing/segmentation, network boundaries, TLS, and DNS
- Hands-on AWS cloud security, including IAM policy design, VPC architecture, KMS/secrets management, and CloudTrail/GuardDuty or equivalent
- Real incident response experience covering triage, containment, forensics, and root cause analysis
- Working knowledge of SIEM/SOAR tooling and writing detection logic with Python/Bash
- Fluent in NIST CSF 2.0, SOC 2, and CCPA/CPRA compliance frameworks
- Comfortable reading and writing real application code
- Experience using AI/LLM tooling for threat intelligence is a plus
- Familiarity with GDPR is a plus
- Experience with PHP/Laravel is a plus
- Comfort around Postgres is helpful
Benefits
Comp & perks- 1st week of employment is mandatory PTO
- 1 Friday off per month
- Company-wide paid shutdown for the week between Christmas and New Year’s
- Flexible time off
- 80% employer-paid benefits in the U.S.
- 100% employer-paid premiums for Extended Healthcare and Dental in Canada
- RRSP/401k match
- Generous Parental Leave policy
- Annual company retreat with team-building activities
- Learning and development opportunities
- Home office setup stipend
- Internet and phone allowance
- Remote-first culture
- Weekly Friday paydays
- Equity
- Significant growth opportunities