Job Description
Partner closely with engineering teams to understand their workflows and build security solutions that enable developer productivity while maintaining a strong security posture.

Drive Rootly's security strategy and architecture by assessing current controls, identifying gaps, and implementing scalable security practices that support company growth.

Design, build, and maintain security tooling and automation that embeds security throughout the software development lifecycle without slowing development velocity.

Work with engineers to integrate security into cloud infrastructure, deployment pipelines, and application architecture while balancing security, performance, and business objectives.

Lead initiatives across application security, infrastructure security, IAM, vulnerability management, risk management, incident response, and security controls.

Support customer-facing security efforts, including security questionnaires, audits, enterprise reviews, and compliance requirements.

Develop scalable security solutions that ensure the platform remains secure, reliable, and resilient as Rootly continues to grow.

Partner with engineering and QA teams to establish secure practices for AI-assisted development and modern software delivery.

Participate in a light on-call rotation and assist with security incident investigation and response.

Act as a technical leader and mentor, helping shape security best practices and the long-term growth of the security function.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day.





We are an equal chance/affirmative action employer that believes everyone matters.

Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances.

If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected].

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements
3-5+ years of hands-on software development experience (Co-op, Master's, and PhD experience may be considered)
3-4+ years of security engineering experience
Experience building security programs, tooling, or processes from the ground up
Strong AWS security experience
Experience designing and implementing security controls within cloud-native environments
Strong understanding of application security and secure software development practices




Ability to think and operate like a developer while solving security challenges
Experience partnering directly with engineering teams in a developer enablement capacity
Experience assessing security posture, identifying gaps, and making strategic recommendations
Experience with infrastructure security, vulnerability management, IAM, and incident response
Strong coding ability and willingness to write production-quality code
• Experience building security automation and internal tooling
Startup experience, preferably in a high-growth SaaS environment
Proven ability to work independently with limited direction
Strong communication skills and ability to influence stakeholders across technical and non-technical teams
Experience supporting customer-facing security initiatives such as questionnaires, audits, and enterprise security reviews Experience working at security-focused companies or cybersecurity vendors
Ruby on Rails experience
PostgreSQL experience
Elasticsearch experience
Kubernetes security experience
Dev

Ops or SRE background
Experience supporting enterprise customers such as AWS, Google, Meta, or similarly complex organizations
Experience with AI-assisted development environments
Experience operating in B-to-C or late-stage startup growth environments
Previous team lead, tech lead, or emerging engineering management experience
Experience implementing security controls for European privacy and compliance requirements
Familiarity with Okta, One

Pass, Sail

Point, or other IAM platforms
Experience supporting organizations through significant scaling periods

📌 Security Software Engineer (Toronto)
🏢 Insight Global
📍 Toronto