Senior Security Engineer at Root Insurance
United States
$111.5k - $139.4k
<meta><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><b><strong style="white-space:pre-wrap;">The Opportunity</strong></b></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">We are seeking a Senior Security Engineer to lead our Data Security domain and help define how the organization protects sensitive data at scale. In this role, you will contribute to the data security roadmap and help establish the standards, control requirements, and risk priorities across the data lifecycle.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">You will partner closely with Data Platform, Analytics, Engineering, Security Operations, and GRC teams to protect policyholder and corporate data in cloud-native environments. Your responsibilities will include data discovery and classification, encryption and key management, data obfuscation and de-identification, fine-grained access controls, secure data sharing, retention and deletion, backup protection, monitoring, and data loss prevention.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">This is a hands-on, highly collaborative role. You will establish secure patterns and standards, influence technical decisions, automate repeatable workflows, and help teams adopt practical controls that enable secure use of data for business and analytics purposes.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><b><strong style="white-space:pre-wrap;">Salary Range</strong></b><span style="white-space:pre-wrap;">: $111,500 - $139,400 </span><span style="color:rgb(0,0,0);white-space:pre-wrap;">(Eligible for competitive bonus and equity offering)</span><br><br><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Root is a "work where it works best" company. This means we will support you working in whatever location that works best for you across the US.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><b><strong style="white-space:pre-wrap;">How You Will Make an Impact</strong></b></p><ul data-pattern="discCircleSquare" data-depth="1" style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;"><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Help establish the data security strategy and roadmap for sensitive policyholder, customer, employee, and corporate data.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Protect PII, financial information, health-related information where applicable, claims data, and other regulated or confidential data across its full lifecycle.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Establish standards for data classification, encryption, key management, masking, tokenization, anonymization, pseudonymization, retention, deletion, and secure data sharing.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Design and improve data access governance, including least privilege, RBAC/ABAC, privileged access, row-level controls, column-level controls, and periodic access reviews.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Partner with Data Platform and Analytics teams to embed security controls into data pipelines, warehouses, data lakes, reporting platforms, and machine learning workflows.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Improve visibility into sensitive data stores, data flows, third-party transfers, and access patterns through discovery, monitoring, DLP, and related security tooling.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Establish secure backup, recovery, and resilience requirements for critical data.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Translate regulatory and business requirements into practical technical controls and measurable risk-reduction initiatives.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Lead cross-functional prioritization, balancing urgent risk remediation with long-term data security maturity and SOC 2 readiness.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Automate security workflows using scripting, APIs, policy-as-code, and approved AI-assisted tools while protecting confidential and regulated information.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Develop playbooks, reference architectures, and reusable patterns that improve consistency and reduce operational overhead.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Participate in the Security Engineering on-call rotation, triaging alerts and security issues during business hours and responding to after-hours escalations as needed.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Communicate data security risks, decisions, and recommendations clearly to engineers, business stakeholders, and senior leadership.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Coach engineering and analytics teams on secure data handling and help raise the organization’s overall data security maturity.</span></li></ul><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><b><strong style="white-space:pre-wrap;">What You Will Need to Succeed</strong></b></p><ul data-pattern="discCircleSquare" data-depth="1" style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;"><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">5+ years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical field.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Hands-on experience securing sensitive data in cloud environments and applying controls across storage, processing, analytics, and data-sharing systems.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience with several of the following: IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Demonstrated experience embedding security requirements into data platforms, data pipelines, analytics workflows, or application architectures.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience working with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience improving security operations through automation, scripting, integrations, policy-as-code, or systematic process improvement.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Familiarity with applicable privacy, security, and regulatory requirements, such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks, where relevant.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Strong communication skills, including the ability to explain technical risks and tradeoffs to both engineers and senior leadership.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Demonstrated ability to balance security requirements with business needs and build alignment across stakeholders.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Sound judgment when using approved AI-assisted tools with confidential, proprietary, or regulated information.</span></li></ul><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><b><strong style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Preferred Qualifications</strong></b></p><ul data-pattern="discCircleSquare" data-depth="1" style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;margin:8px 0px;line-height:1.6;padding:0px 0px 0px 32px;list-style-type:disc;"><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience in insurance, financial services, healthcare, or another regulated industry.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience with data security posture management, data activity monitoring, enterprise DLP, or cloud data security platforms.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Familiarity with major cloud providers and cloud-native data services.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience with infrastructure-as-code, CI/CD security, policy-as-code, or security automation.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Experience supporting SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, ISO 27001, or similar compliance programs.</span></li><li style="color:rgb(0,0,0);margin:3px 0px;font-size:11pt;line-height:1.6;letter-spacing:0.25px;"><span style="color:rgb(0,0,0);font-size:11pt;white-space:pre-wrap;">Familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or comparable platforms.</span></li></ul><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><br><span style="color:rgb(29,28,29);white-space:pre-wrap;">As part of Root's interview process, we kindly ask that all candidates be on camera for virtual interviews. This helps us create a more personal and engaging experience for both you and our interviewers. Being on camera is a standard requirement for our process and part of how we assess fit and communication style, so we do require it to move forward with any applicant's candidacy. If you have any concerns, feel free to let us know once you are contacted. We’re happy to talk it through.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;text-align:left;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><span style="color:rgb(29,28,29);white-space:pre-wrap;">Please see our Privacy Notice available </span><a href="http://inc.joinroot.com/california-job-applicant-privacy-notice/" target="_blank" class="css-173makr-linkStyle" style="color:rgb(30,74,169);cursor:pointer;"><span style="color:rgb(29,28,29);white-space:pre-wrap;">HERE</span></a><span style="color:rgb(29,28,29);white-space:pre-wrap;"> for more information on how we process your personal data.</span></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><br></p><p style="font-family:"Basel Grotesk",Arial,sans-serif;font-size:11pt;font-weight:400;line-height:1.6;letter-spacing:0.25px;margin:4px 0px;padding:0px;"><span style="color:rgb(29,28,29);white-space:pre-wrap;">Consistent with the Americans with Disabilities Act (ADA) and the Civil Rights Act of 1964, it is the policy of Root to provide reasonable accommodation when requested by a qualified applicant or candidate with a disability, unless such accommodation would cause an undue hardship for Root. The policy regarding requests for reasonable accommodation applies to all aspects of the hiring process. If reasonable accommodation is needed, please contact recruiting@joinroot.com.</span></p>
Apply Now
