Senior Security Engineer - Data Security
Root Insurance20 days ago
Remote, United StatesSenior
Base Salary
$112k - $139k/yr
Responsibilities
- Establish the data security strategy, roadmap, standards, control requirements, and risk priorities for sensitive data.
- Protect regulated and confidential information throughout its lifecycle, including discovery, classification, encryption, access, sharing, retention, deletion, backup, and monitoring.
- Design and improve data access governance using least privilege, RBAC/ABAC, privileged access, row-level and column-level controls, and access reviews.
- Embed security controls into data platforms, pipelines, warehouses, data lakes, reporting platforms, analytics workflows, and machine learning workflows.
- Improve visibility into sensitive data stores, data flows, third-party transfers, and access patterns through discovery, monitoring, and DLP tooling.
- Translate regulatory and business requirements into measurable technical controls and risk-reduction initiatives, including SOC 2 readiness.
- Automate security workflows using scripting, APIs, policy-as-code, and approved AI-assisted tools.
- Develop playbooks, reference architectures, and reusable secure patterns while participating in the Security Engineering on-call rotation.
- Communicate risks and recommendations to engineers, stakeholders, and senior leadership, and coach engineering and analytics teams on secure data handling.
Requirements
- At least 5 years of experience in data security, cloud security, security engineering, privacy engineering, or a related technical field.
- Hands-on experience securing sensitive data in cloud environments across storage, processing, analytics, and data-sharing systems.
- Experience with IAM, RBAC/ABAC, encryption, KMS/HSM, data classification, DLP, data discovery, access reviews, tokenization, masking, retention, deletion, backup security, and audit logging in several areas.
- Experience embedding security requirements into data platforms, data pipelines, analytics workflows, or application architectures.
- Experience collaborating with engineering, data platform, analytics, infrastructure, Security Operations, Privacy, Legal, or GRC teams.
- Experience improving security operations through automation, scripting, integrations, policy-as-code, or systematic process improvement.
- Familiarity with privacy, security, and regulatory requirements such as HIPAA, GLBA, state privacy laws, NYDFS, PCI DSS, NIST, or similar frameworks.
- Strong communication, judgment, and stakeholder-alignment skills, including the ability to explain technical risks and tradeoffs to engineers and senior leadership.
- Preferred experience includes insurance, financial services, healthcare, data security posture management, data activity monitoring, enterprise DLP, cloud data security platforms, major cloud providers, infrastructure-as-code, CI/CD security, policy-as-code, security automation, and compliance programs such as SOC 2, HIPAA, GLBA, NYDFS, PCI DSS, or ISO 27001.
- Preferred familiarity with AI-assisted engineering tools such as GitHub Copilot, Claude, Codex, or comparable platforms.
Benefits
- Salary range is $111,500-$139,400, with eligibility for a competitive bonus and equity offering.
- Work where it works best with support for working from any location across the United States.
- Virtual interviews require candidates to be on camera, with reasonable accommodations available through the stated process.
Categories
About Root Insurance
Root Inc. is disrupting the archaic, trillion-dollar insurance industry. We’re driving the FinTech revolution by creating powerful insurance products and technology platforms that rewrite the rules for today’s world, promoting fairness, simplicity, and personalization. And we’re just getting started.