Security Incident Response Engineer

Lead incident response and threat detection as Roofr’s remote Senior Security Engineer, using Python, SIEM or SOAR, and forensic investigation skills.This senior individual contributor reports to the VP of Engineering and partners with the CTO, DevOps, and security guild. You will act as the front-line responder during security incidents while improving how Roofr detects, contains, eradicates, and learns from threats. The role also connects response work with threat modeling and secure development.Key Responsibilities:
Serve as incident commander during security eventsContain, eradicate, investigate, and review security incidentsWrite SIEM, SOAR, and alerting logic using attack techniquesRun tabletop exercises and incident playbook drillsThreat-model features and infrastructure changes before releaseRequirements:
Five to eight-plus years in security engineering or incident responsePrimary or senior responder experience on real incidentsPython or Bash experience for detection and security toolingAbility to investigate application code directlyCalm, decisive judgment under incident pressureBring incident command, detection engineering, and threat-modeling expertise to Roofr’s remote security practice in Canada.
#J-18808-Ljbffr