Staff Security Engineer
Root Insurance3 days ago
Remote, United StatesStaff+
Base Salary
$157k - $196k/yr
Responsibilities
- Define architectural standards and secure reference patterns for Root’s cloud environment, applications, employees, customers, and core systems.
- Embed security into the development lifecycle through threat modeling, design reviews, secure defaults, secure libraries, and CI checks.
- Build security metrics and scorecards that demonstrate risk reduction and inform prioritization and security spending.
- Design architectures, threat models, and runtime protections for AI systems in production.
- Use AI to automate vulnerability management, threat detection, and security operations.
- Own the security tooling stack and make build-versus-buy decisions.
- Mentor engineers through design reviews and pair sessions and explain security practices to non-security stakeholders.
- Participate in the security engineering team’s on-call rotation.
Requirements
- 10+ years of security experience spanning security operations, product security, infrastructure security, and application security.
- Experience setting architectural direction through roadmaps, standards, and secure reference patterns adopted by multiple business units.
- Experience embedding security into the development lifecycle through threat modeling, design reviews, and secure defaults.
- Deep technical breadth across AWS and traditional enterprise security, including hands-on proof-of-concept development and troubleshooting.
- Experience running security metrics programs that influenced prioritization and demonstrated impact.
- Experience designing systems against best practices and regulatory requirements and preparing organizations to pass audits by design.
- Hands-on experience securing AI systems from threat modeling through runtime defense and using AI to automate security work.
- Ability to communicate with non-security stakeholders, build consensus, and influence engineering leadership.
- Bachelor’s or master’s degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
- CISSP is a plus.
- Offensive security experience in penetration testing, red teaming, or exploit development is preferred, especially experience attacking AI systems.
Benefits
- Work where it works best from any location across the United States.
- Eligible for a competitive bonus and equity offering.
- Virtual interviews require candidates to be on camera, with accommodation discussions available if needed.
About Root Insurance
Root Insurance is a publicly traded auto insurer that sells policies directly to U.S. drivers through a mobile app and website. It prices risk using smartphone-based telematics and machine-learning models, and manages end-to-end underwriting and claims. Founded in 2015 and headquartered in Columbus, Ohio, Root is listed on Nasdaq under the ticker ROOT and operates across multiple U.S. states.