The Role
Own Rootly’s internal enterprise security program, including identity and access management, Google Workspace security, Zero Trust access, endpoint and data protection, SIEM deployment, corporate detection and response, vendor security reviews, AI tool governance, SOC 2 evidence, and customer security questionnaires. The role partners with AppSec and infrastructure teams and participates in corporate security incident on-call rotations.
Summary Generated by Built In
About Rootly
About the Role
What You'll Do
What You'll Need
Nice to Have
Why Rootly?
At Rootly, we are on a mission to be the go-to way companies respond when things go wrong, helping every organization be more reliable. We do this by building an industry-leading incident management platform that allows companies around the world to consistently and quickly resolve incidents. We are not simply transforming an industry, we are carving out a new multi-billion-dollar category ourselves and need incredible talent to achieve this ambitious goal together.
Customers love Rootly. Some of the fastest-growing companies around the world such as NVIDIA, DoorDash, Uber, Canva, Tripadvisor, Squarespace and more rely on Rootly to power their critical incident management process. They obsess over our delightful enterprise-ready platform and unique partnership model. See why our customers have reviewed us 5 stars on G2.
Investors love Rootly. We are backed by some of the most respected funds in the world from Y Combinator to operators like the CTO of Dropbox and GitHub. We'd be happy to disclose our entire funding and profitability picture live during the interview. As a culture we relentlessly put transparency first. We conduct monthly financial reviews as a team so everyone has a pulse on the health of the business and publish what we are building in our weekly changelog.
As a Senior Security Engineer focused on Enterprise Security, you'll own the security of how Rootly works internally: our identity and access layer, our device fleet, Zero Trust for internal access, the SaaS tools and vendors we rely on, and how we detect and respond to corporate security incidents. You'll select, stand up, and run much of our corporate security stack, including SIEM, EDR, MDM, and DLP.
You'll join a small security team and work alongside our existing AppSec and infrastructure owners, partnering with them on shared surfaces. This is a hands-on role with real ownership and a direct impact on how Rootly scales securely as we grow.
- Own Google Workspace security end to end, including SSO and MFA enforcement, OAuth app governance, and automated joiner, mover, and leaver lifecycle processes.
- Lead our Cloudflare Zero Trust rollout for internal access, including Access, WARP, and device posture checks.
- Select, roll out, and operate our endpoint and data protection tooling, including EDR, MDM, and DLP.
- Stand up our SIEM and own corporate detection and response, including phishing, account takeover, and lost or compromised devices.
- Run security reviews for new vendors and SaaS tools, and set governance for how the team adopts and uses AI tools.
- Produce and maintain evidence for SOC 2 and support responses to customer security questionnaires.
- Partner with our AppSec and infrastructure owners on shared surfaces such as identity, cloud access, and incident response.
- Participate in the security on-call rotation for corporate security incidents, with clear escalation paths.
We care more about execution, ownership, and impact than fancy degrees or FAANG experience. If the following resonates with you, we want to hear from you:
- 5+ years in enterprise or corporate security, security operations or IT security.
- Strong access management experience, including Google Workspace administration, Google or Okta as an identity provider, access reviews, and least privilege.
- Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution.
- Hands-on experience selecting, deploying and running SIEM, EDR, MDM, and DLP tooling.
- Proficiency in a scripting language (e.g. Python, Go, or Bash) to automate security and IT workflows.
- AWS security experience.
- Experience leading a SOC 2 Type II audit.
We're not just another startup. We're building something category-defining and want teammates who crave ownership, love solving hard problems, and thrive in a high-bar, high-impact environment.
Here's what you can expect when you join Rootly:
- Competitive compensation and early equity in a fast-growing, venture-backed company.
- Comprehensive medical, dental, and vision coverage.
- 3 weeks of vacation, plus unlimited sick and mental health days, and a company-wide end-of-year shutdown to recharge.
- $500 stipend for home office setup.
- Unlimited token usage and access to AI tools.
- A fast-moving, high-impact environment where your leadership and ideas directly shape the future of the company.
This is a newly created vacancy.
As we build out the team, we may use AI to support parts of our interview process, like reviewing assessments, but it's a tool that helps our people, not a substitute for their judgement.
If this sounds like the kind of challenge and opportunity you're looking for, apply now and let's build something great together.
Accommodations are available on request at any stage of our recruitment process. Contact [email protected] and we will work with you to meet your needs confidentially.
Rootly is an equal opportunity employer. We do not discriminate on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, record of offences, marital status, family status, disability, or any other ground protected by the Ontario Human Rights Code or applicable law.
Skills Required
- 5+ years of experience in enterprise, corporate, security operations, or IT security
- Strong access management experience, including Google Workspace administration, Google or Okta as an identity provider, access reviews, and least privilege
- Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution
- Hands-on experience selecting, deploying, and operating SIEM, EDR, MDM, and DLP tooling
- Proficiency in a scripting language such as Python, Go, or Bash for automating security and IT workflows
- AWS security experience
- Experience leading a SOC 2 Type II audit
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Rootly is an incident management platform on Slack that helps automate manual admin work during incidents. Leading companies such as NVIDIA, Squarespace, Canva, Grammarly, OpenSea, Figma, and countless others trust Rootly to build a consistent incident response process. See why they rate us 5 stars on G2: https://www.g2.com/products/rootly-manage-incidents-on-slack/reviews
