Own Rootly’s internal enterprise security program, including identity and access management, Google Workspace security, Zero Trust access, endpoint and data protection, SIEM deployment, corporate detection and response, vendor security reviews, AI tool governance, SOC 2 evidence, and customer security questionnaires. The role partners with AppSec and infrastructure teams and participates in corporate security incident on-call rotations.
About Rootly
About the Role
What You'll Do
What You'll Need
Nice to Have
Why Rootly?
At Rootly, we are on a mission to be the go-to way companies respond when things go wrong, helping every organization be more reliable. We do this by building an industry-leading incident management platform that allows companies around the world to consistently and quickly resolve incidents. We are not simply transforming an industry, we are carving out a new multi-billion-dollar category ourselves and need incredible talent to achieve this ambitious goal together.
Customers love Rootly. Some of the fastest-growing companies around the world such as NVIDIA, DoorDash, Uber, Canva, Tripadvisor, Squarespace and more rely on Rootly to power their critical incident management process. They obsess over our delightful enterprise-ready platform and unique partnership model. See why our customers have reviewed us 5 stars on G2.
Investors love Rootly. We are backed by some of the most respected funds in the world from Y Combinator to operators like the CTO of Dropbox and GitHub. We'd be happy to disclose our entire funding and profitability picture live during the interview. As a culture we relentlessly put transparency first. We conduct monthly financial reviews as a team so everyone has a pulse on the health of the business and publish what we are building in our weekly changelog.
As a Senior Security Engineer focused on Enterprise Security, you'll own the security of how Rootly works internally: our identity and access layer, our device fleet, Zero Trust for internal access, the SaaS tools and vendors we rely on, and how we detect and respond to corporate security incidents. You'll select, stand up, and run much of our corporate security stack, including SIEM, EDR, MDM, and DLP.
You'll join a small security team and work alongside our existing AppSec and infrastructure owners, partnering with them on shared surfaces. This is a hands-on role with real ownership and a direct impact on how Rootly scales securely as we grow.
- Own Google Workspace security end to end, including SSO and MFA enforcement, OAuth app governance, and automated joiner, mover, and leaver lifecycle processes.
- Lead our Cloudflare Zero Trust rollout for internal access, including Access, WARP, and device posture checks.
- Select, roll out, and operate our endpoint and data protection tooling, including EDR, MDM, and DLP.
- Stand up our SIEM and own corporate detection and response, including phishing, account takeover, and lost or compromised devices.
- Run security reviews for new vendors and SaaS tools, and set governance for how the team adopts and uses AI tools.
- Produce and maintain evidence for SOC 2 and support responses to customer security questionnaires.
- Partner with our AppSec and infrastructure owners on shared surfaces such as identity, cloud access, and incident response.
- Participate in the security on-call rotation for corporate security incidents, with clear escalation paths.
We care more about execution, ownership, and impact than fancy degrees or FAANG experience. If the following resonates with you, we want to hear from you:
- 5+ years in enterprise or corporate security, security operations or IT security.
- Strong access management experience, including Google Workspace administration, Google or Okta as an identity provider, access reviews, and least privilege.
- Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution.
- Hands-on experience selecting, deploying and running SIEM, EDR, MDM, and DLP tooling.
- Proficiency in a scripting language (e.g. Python, Go, or Bash) to automate security and IT workflows.
- AWS security experience.
- Experience leading a SOC 2 Type II audit.
We're not just another startup. We're building something category-defining and want teammates who crave ownership, love solving hard problems, and thrive in a high-bar, high-impact environment.
Here's what you can expect when you join Rootly:
- Competitive compensation and early equity in a fast-growing, venture-backed company.
- Comprehensive medical, dental, and vision coverage.
- 3 weeks of vacation, plus unlimited sick and mental health days, and a company-wide end-of-year shutdown to recharge.
- $500 stipend for home office setup.
- Unlimited token usage and access to AI tools.
- A fast-moving, high-impact environment where your leadership and ideas directly shape the future of the company.
This is a newly created vacancy.
As we build out the team, we may use AI to support parts of our interview process, like reviewing assessments, but it's a tool that helps our people, not a substitute for their judgement.
If this sounds like the kind of challenge and opportunity you're looking for, apply now and let's build something great together.
Accommodations are available on request at any stage of our recruitment process. Contact [email protected] and we will work with you to meet your needs confidentially.
Rootly is an equal opportunity employer. We do not discriminate on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, creed, sex, sexual orientation, gender identity, gender expression, age, record of offences, marital status, family status, disability, or any other ground protected by the Ontario Human Rights Code or applicable law.
Rootly Toronto, Ontario, CAN Office
Toronto, Canada
Similar Jobs
Cloud • Security • Software • Cybersecurity • Automation
Leads regional candidate experience operations, including interview coordination, offers, contracts, background checks, onboarding handoffs, workload balancing, escalations, and specialist development. Builds candidate experience reporting, identifies process risks and bottlenecks, standardizes global coordination processes, and partners with recruiting, hiring managers, People Operations, IT, and talent leadership across time zones.
Top Skills:
Applicant Tracking Systems (Ats)GitlabGoogle WorkspaceGreenhouseModernloop
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Own the full sales cycle for small and midsize business merchants, converting inbound leads and generating outbound opportunities. Build and manage pipeline, conduct consultative discovery, close high-volume deals, forecast accurately in Salesforce, and meet or exceed revenue quotas. Collaborate with onboarding, product, marketing, and support teams while continuously improving conversion rates, deal size, and sales activity. The role requires selling in both French and English.
Top Skills:
Salesforce
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Designs, builds, and operates shared machine learning infrastructure, including feature stores, model hosting, inference, training, evaluation, and rules engines. Leads large-scale distributed systems, reliability improvements, incident response, and safe deployments. Partners with applied ML teams to develop reusable platform capabilities, supports internal users, mentors engineers, and contributes to technical roadmaps and design reviews.
Top Skills:
Amazon DynamodbAmazon Ec2Amazon EksAmazon SagemakerSparkAWSDatabricksGoGrpcJavaKotlinNvidia TritonOnnxProtocol BuffersPythonReactTypescriptVllm
What you need to know about the Toronto Tech Scene
Although home to some of the biggest names in tech, including Google, Microsoft and Amazon, Toronto has established itself as one of the largest startup ecosystems in the world. And with over 2,000 startups — more than 30 percent of the country's total startups — Toronto continues to attract new businesses. Be it helping entrepreneurs manage their finances, simplifying business operations by automating payroll or assisting pharmaceutical companies in launching new drugs, the city's tech scene is just getting started.
