> Markdown version of [/jobs/ext/4690405-senior-security-engineer-enterprise-security](https://www.wearedevelopers.com/jobs/ext/4690405-senior-security-engineer-enterprise-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer, Enterprise Security

- **Company:** ROOTLY, INC.
- **Location:** San Francisco, CA, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Bash Shell, Software as a Service, Cyber Security, Identity and Access Management, Python (Programming Language), OAuth, Role-Based Access Control, Anti-Phishing, Zero Trust Network Access, Security Information and Event Management, Scripting, Okta, Software Security, Cloudflare, Gsuite
- **Published:** November 12, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=325a2fb0b6c38441

## About the Role

We care more about execution, ownership, and impact than fancy degrees or FAANG experience. If the following resonates with you, we want to hear from you:

 * 5+ years in enterprise or corporate security, security operations or IT security.
 * Strong access management experience, including Google Workspace administration, Google or Okta as an identity provider, access reviews, and least privilege.
 * Experience with Cloudflare Zero Trust or an equivalent Zero Trust access solution.
 * Hands-on experience selecting, deploying and running SIEM, EDR, MDM, and DLP tooling.
 * Proficiency in a scripting language (e.g. Python, Go, or Bash) to automate security and IT workflows.

## Description

As a Senior Security Engineer focused on Enterprise Security, you'll own the security of how Rootly works internally: our identity and access layer, our device fleet, Zero Trust for internal access, the SaaS tools and vendors we rely on, and how we detect and respond to corporate security incidents. You'll select, stand up, and run much of our corporate security stack, including SIEM, EDR, MDM, and DLP.
You'll join a small security team and work alongside our existing AppSec and infrastructure owners, partnering with them on shared surfaces. This is a hands-on role with real ownership and a direct impact on how Rootly scales securely as we grow., * Own Google Workspace security end to end, including SSO and MFA enforcement, OAuth app governance, and automated joiner, mover, and leaver lifecycle processes.

 * Lead our Cloudflare Zero Trust rollout for internal access, including Access, WARP, and device posture checks.
 * Select, roll out, and operate our endpoint and data protection tooling, including EDR, MDM, and DLP.
 * Stand up our SIEM and own corporate detection and response, including phishing, account takeover, and lost or compromised devices.
 * Run security reviews for new vendors and SaaS tools, and set governance for how the team adopts and uses AI tools.
 * Produce and maintain evidence for SOC 2 and support responses to customer security questionnaires.
 * Partner with our AppSec and infrastructure owners on shared surfaces such as identity, cloud access, and incident response.
 * Participate in the security on-call rotation for corporate security incidents, with clear escalation paths.