Senior Security Engineer - Data Security
Root Insurance2 months ago
Remote, United StatesSenior
Base Salary
$112k - $139k/yr
Responsibilities
- Establish the data security strategy, roadmap, standards, control requirements, and risk priorities for sensitive data.
- Protect regulated and confidential information throughout its lifecycle, including discovery, classification, encryption, access, sharing, retention, deletion, backup, and monitoring.
- Design and improve data access governance using least privilege, RBAC/ABAC, privileged access, row-level and column-level controls, and access reviews.
- Embed security controls into data platforms, pipelines, warehouses, data lakes, reporting platforms, analytics workflows, and machine learning workflows.
- Improve visibility into sensitive data stores, data flows, third-party transfers, and access patterns through discovery, monitoring, and DLP tooling.
- Translate regulatory and business requirements into measurable technical controls and risk-reduction initiatives, including SOC 2 readiness.
- Automate security workflows using scripting, APIs, policy-as-code, and approved AI-assisted tools.
- Develop playbooks, reference architectures, and reusable secure patterns while participating in the Security Engineering on-call rotation.
- Communicate risks and recommendations to engineers, stakeholders, and senior leadership, and coach engineering and analytics teams on secure data handling.
Requirements
- At least 5 years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical field.
- Hands-on experience securing sensitive data in cloud environments across storage, processing, analytics, and data-sharing systems.
- Experience with IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging in several areas.
- Experience embedding security requirements into data platforms, data pipelines, analytics workflows, or application architectures.
- Experience collaborating with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams.
- Experience improving security operations through automation, scripting, integrations, policy-as-code, or systematic process improvement.
- Familiarity with privacy, security, and regulatory requirements such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks.
- Strong communication, judgment, and stakeholder-alignment skills, including the ability to explain technical risks and tradeoffs to engineers and senior leadership.
- Preferred experience includes insurance, financial services, healthcare, data security posture management, data activity monitoring, enterprise DLP, cloud data security platforms, major cloud providers, infrastructure-as-code, CI/CD security, policy-as-code, security automation, and compliance programs such as SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, or ISO 27001.
- Preferred familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or comparable platforms.
Benefits
- Salary range is $111,500-$139,400, with eligibility for a competitive bonus and equity offering.
- Work where it works best with support for working from any location across the United States.
- Virtual interviews require candidates to be on camera, with reasonable accommodations available through the stated process.
Categories
About Root Insurance
Root Insurance is a publicly traded auto insurer that sells policies directly to U.S. drivers through a mobile app and website. It prices risk using smartphone-based telematics and machine-learning models, and manages end-to-end underwriting and claims. Founded in 2015 and headquartered in Columbus, Ohio, Root is listed on Nasdaq under the ticker ROOT and operates across multiple U.S. states.