Security Engineer, Shift Technology
Data & Identity
Plus variable component tied to personal and company performance and equity
3+ days a week in office
AI-driven insurance fraud solution
Open for applications
AI-driven insurance fraud solution
501-1000 employees
Open for applications
Plus variable component tied to personal and company performance and equity
3+ days a week in office
501-1000 employees
Company mission
To revolutionise the policyholder experience through wide-ranging products that apply AI and advanced data science to key insurance processes.
Role
Who you are
- The ideal candidate is a security engineer who has sub-specialized in Identity and Data but retains broad general Cloud Security, DevSecOps, and SecOps skills applicable to a growing SOC
- 5+ years of experience in technical security roles (Security Engineering, IAM Engineering, or Systems Integration)
- Proven experience working in regulated environments (e.g., ISO 27001, SOC 2, GDPR) and translating compliance requirements into technical data controls
- Familiarity with security frameworks, particularly MITRE ATT&CK
- Understanding of compliance and privacy frameworks for context (e.g., ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR)
- Broad understanding of core information security technologies and concepts
- Identity Platforms: Hands-on engineering experience with major IAM platforms (specifically Entra ID and/or Okta)
- Protocols: Deep technical understanding of authentication and authorization standards (SAML, OAuth, OpenID Connect, SCIM) and how to troubleshoot them
- Data Governance: Experience implementing Data Classification, Data Discovery, and DLP tools in a cloud-native environment
- Access Control: Strong grasp of RBAC, ABAC, and Least Privilege principles, specifically within Azure and SaaS ecosystems
- Automation: Proficiency in scripting languages (PowerShell, Python, Javascript) to automate JML flows, API integrations, general security automation
- Cloud Security: Familiarity with Azure security services and general cloud security (Sentinel, Defender for Cloud, Key Vault, Blobs, Network Security)
- DevSecOps Awareness: Understanding of CI/CD pipelines, secret management in code, and vulnerability scanning (SAST/DAST)
- SecOps: Experience with Incident Response processes and using SIEM/XDR tools to investigate threats
- Communication: Excellent ability to document technical workflows and communicate security risks to non-technical data owners
- A "can-do" attitude with the ability to own projects independently from design to operation
- Strong attention to detail, particularly regarding data privacy and user access rights
- A passion for automating the "boring stuff" to focus on high-value engineering
What the job involves
- As a Data & Identity Security Engineer within Shift, you will act as a specialist bridge between our core infrastructure and our information security objectives
- This is a hybrid role designed for a T-shaped engineer: you will spend 60% of your time leading deep-dive engineering projects to engineer and automate our Identity and Data Protection capabilities, and 40% of your time supporting the wider team with general SecOps and DevSecOps BAU and improvement projects
- You will own the technical design and implementation of the "Who, What, and Where" - ensuring the right people have access to the right data, while maintaining a holistic view of our general security posture. As part of the Information Security Department, this role reports to the CISO.
- Identity & Data Engineering (60% - Primary Focus)
- Identity Architecture & Automation: Design, build, and maintain automated Joiner, Mover, and Leaver (JML) workflows to ensure seamless and secure user lifecycle management
- Data Governance & Control: Translate high-level data classification policies into practical technical controls, including Role-Based Access Control (RBAC) models and automated Data Loss Prevention (DLP) rules
- IAM Integration: Lead the technical integration of critical business applications into the central IAM platform (e.g., Entra ID, Okta) utilizing SSO (SAML/OIDC) and automated provisioning (SCIM)
- Access Engineering: Define and refine the logic for automated access approvals, access reviews, and "just-in-time" privilege escalation, handling exceptions that fall outside of standard workflows
- Data Discovery: Engineer and operate automated detections to identify, map, and classify sensitive data across our cloud and SaaS environments
- Secure by Design (Identity): Collaborate with DevOps and Infrastructure teams to ensure Identity best practices (Secret Management, Service Principal least-privilege, Machine Identity) are embedded in new systems and CI/CD pipelines
- General Security Operations & DevSecOps (40% - BAU & Support)
- Detect & Respond: Participate in the general security incident response rotation. Investigate alerts, contain threats, and drive recovery for security events (not limited to identity)
- Vulnerability Management: Support the operation of the software vulnerability management program, helping to prioritize remediation of code defects and infrastructure flaws
- Cloud Security Operations: Collaborate with SRE and Cloud Operations to monitor the general security of the Azure platform, identifying risks and weaknesses in infrastructure (CSPM) and architectural and engineering flaws
- Security Tooling: Assist in the maintenance of holistic security tooling coverage (e.g., Endpoint Detection, SAST/DAST tools) to ensure the build and deploy pipeline remains secure
- Technical Escalation: Serve as a technical escalation point for complex security issues involving authentication, authorization, and general security anomalies
Application process
- TA Interview
- CISO Interview
- Technical panel interview with the team
- Couple of short final interviews (in one session) with some Tech leaders
Our take
The global insurtech market is projected to grow substantially given the increased demand for insurance service digitisation, projected market expansion, and developments in technology that have made it easier to buy and process claims. Insurtech helps create new avenues that large insurance companies have less incentive to pursue, such as offering social insurance and customised policies for clients.
In January 2021, Shift Technology introduced the Shift Insurance Suite to help the insurance industry apply AI-based decision automation and optimisation technology solutions. This addresses critical processes across the insurance policy lifecycle, and helps insurers to achieve faster, more accurate claims and policy resolutions.
Shift Technology is focusing on continuous deployment in the UK and the US, whilst exploring opportunities in Singapore, as it attempts to become an international player in the market. However, it must stave off a number of major competitors to do so, including Quantemplate, Slice and Neos.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-1% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
May 2021
$220m
SERIES D
Mar 2019
$62.6m
SERIES C
Total funding: $322.5m
Company benefits
- Flexible remote and hybrid working options
- Competitive Salary and a variable component tied to personal and company performance
- Company equity
- Generous PTO and paid holidays
- Parental leave opportunities
- Extensive mental health benefits provided via our global Employee Assistance Program
- Paid volunteering time - 16 hours annually
Company HQ
Bercy, Paris, France
Leadership
Jeremy Jawish
(Co-Founder & CEO)Experience in fraud detection solution development for AXA in 2011, and as an FICC Strategist for Goldman Sachs in 2012.
Eric Sibony
(Co-Founder & CSO)PhD in machine learning from 2012-2016, and has been CSO since 2013.
David Durrleman
(Co-Founder & Fellow Engineer)Experience as a Fixed Income Strategist for Goldman Sachs between 2008-2013.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 9 more jobs at Shift Technology