1 day ago
Toronto, CanadaSenior
Responsibilities
- Own Google Workspace security, including SSO, MFA enforcement, OAuth application governance, and automated joiner, mover, and leaver processes.
- Lead the Cloudflare Zero Trust rollout, including Access, WARP, and device posture checks.
- Select, deploy, and operate EDR, MDM, DLP, and SIEM tooling.
- Own corporate detection and response for phishing, account takeover, and lost or compromised devices.
- Conduct vendor and SaaS security reviews and establish governance for internal AI tool usage.
- Maintain SOC 2 evidence and support customer security questionnaires.
- Partner with AppSec and infrastructure owners on identity, cloud access, and incident response.
- Participate in the corporate security incident on-call rotation.
Requirements
- 5+ years of experience in enterprise security, corporate security, security operations, or IT security.
- Strong access management experience, including Google Workspace administration, Google or Okta identity providers, access reviews, and least privilege.
- Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution.
- Hands-on experience selecting, deploying, and operating SIEM, EDR, MDM, and DLP tooling.
- Proficiency in a scripting language such as Python, Go, or Bash.
- AWS security experience is preferred.
- Experience leading a SOC 2 Type II audit is preferred.
Benefits
- Competitive compensation and early equity in a venture-backed company.
- Comprehensive medical, dental, and vision coverage.
- Three weeks of vacation, unlimited sick and mental health days, and a company-wide end-of-year shutdown.
- $500 home office setup stipend.
- Unlimited token usage and access to AI tools.
- High-impact environment with significant ownership and leadership opportunity.
About Rootly
Rootly builds an AI-native incident management platform for SRE and DevOps teams, integrated with Slack and Microsoft Teams to coordinate on-call response, resolution, and retrospectives. It sells B2B SaaS subscriptions used by companies such as NVIDIA, Figma, Canva, and Squarespace. The privately held company is headquartered in Toronto and raised a $15.2M Series A in 2023.