Senior Security Architect, Shift Technology
+ Company equity
AI-driven insurance fraud solution
Be an early applicant
AI-driven insurance fraud solution
501-1000 employees
Be an early applicant
+ Company equity
501-1000 employees
Company mission
To revolutionise the policyholder experience through wide-ranging products that apply AI and advanced data science to key insurance processes.
Role
Who you are
- At least seven (7) years of proven experience in a senior cloud security, product security, or security architecture role
- Bachelor’s Degree in a relevant field or equivalent work experience
- Relevant security or Azure certifications (e.g., AZ-500, CISSP) are highly desirable
- Proven experience designing security for multi-tenant SaaS applications in a public cloud environment, preferably Azure
- A firm understanding of core security principles like least privilege, defense-in-depth, and zero trust, and able to champion and educate colleagues on those principles
- Deep understanding of the OWASP Top 10, common application and cloud infrastructure security vulnerabilities, and their mitigation
- Hands-on experience with application security tools (SAST, DAST, SCA) and threat modeling methodologies such as STRIDE
- Strong knowledge of core Azure security services (e.g., Sentinel, Defender for Cloud, Key Vault, Private Link, Azure Policy)
- Expert-level knowledge of Microsoft Entra ID, including roles, conditional access, application permissions, and identity governance
- Experience designing and implementing security controls for a variety of data platforms in Azure (e.g., Azure SQL, Cosmos DB)
- Direct experience designing and securing VDI solutions in Azure (Azure Virtual Desktop), including network segmentation, endpoint security for images, and DLP policy enforcement
- Strong familiarity with security frameworks, particularly MITRE ATT&CK
- Understanding of compliance and privacy frameworks for context (e.g., ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR)
- Broad understanding of core information security technologies and concepts
- A strong analytical and investigative mindset with high attention to detail
- Excellent communication skills, with the ability to clearly articulate technical findings
- A collaborative team player who can work effectively with technical and non-technical stakeholders
- Ability to use architecture as a positive tool to guide, shape, transform, and accelerate
What the job involves
- The security team is a critical component of Shift Technology as no organization is immune to cyber-crime
- The team is responsible for protecting information throughout the security infrastructure, edge devices, networks, and data
- We strive to stay up to date with the latest tactics hackers are employing in the field in order to prevent data breaches by monitoring and reacting to attacks but the first step is finding the most qualified professionals to lead the way
- As a Senior Security Architect, reporting to the CISO, you will be a senior member of the Information Security team, responsible for the end-to-end security architecture of our Azure-based SaaS platform and the creation, adoption, and governance of security architecture best practice across our organisation
- You will serve as the subject matter expert for both cloud infrastructure and application security, partnering with engineering teams to embed security into the entire software development lifecycle (SDLC)
- You will design secure, scalable, and resilient solutions for our single- and multi-tenant offerings, ensuring the protection of our platform and our customers' data
- Design and maintain the security reference architecture for our Azure-native, Windows, and Kubernetes-based SaaS products
- Act as the primary security consultant for product and engineering teams, providing authoritative guidance on secure design patterns for Azure infrastructure and services
- Review and approve architectural designs for new services to ensure they align with security principles (Zero Trust, defense-in-depth) and compliance requirements
- Define and enforce security standards for Azure networking, including VNet segmentation, firewalling, and private connectivity
- Lead threat modeling exercises (e.g., STRIDE) with development teams for new products and features to identify and mitigate risks early in the SDLC
- Develop and maintain secure coding standards and provide expert guidance on the prioritization and remediation of findings from SAST, DAST, and SCA tools
- Architect security solutions for the SaaS application layer, including tenant isolation, customer data segregation, secure APIs, and authentication/authorization patterns
- Design and enforce security patterns for protecting data at rest and in transit across all Azure data platforms (e.g., Azure SQL, Cosmos DB, Databricks)
- Partner with the Data Access Governance function to translate data classification policies into tangible technical access controls
- Architect solutions for secrets management, encryption, and key management, primarily leveraging Azure Key Vault
- Architect and design a secure data access solution using VDI (Azure Virtual Desktop), including the integration of Data Loss Prevention (DLP) and other data protection controls to prevent data exfiltration
- Develop security-as-code and Infrastructure as Code (IaC) to create guardrails and proactively detect insecure configurations
- Serve as a senior technical escalation point for the Security Operations team during complex cloud security investigations
- Evaluate, prototype, and recommend new cloud security technologies and services to mature the overall security program
Application process
- TA Interview
- CISO interview
- Security team interview
- CTO interview
Our take
The global insurtech market is projected to grow substantially given the increased demand for insurance service digitisation, projected market expansion, and developments in technology that have made it easier to buy and process claims. Insurtech helps create new avenues that large insurance companies have less incentive to pursue, such as offering social insurance and customised policies for clients.
In January 2021, Shift Technology introduced the Shift Insurance Suite to help the insurance industry apply AI-based decision automation and optimisation technology solutions. This addresses critical processes across the insurance policy lifecycle, as well as helps insurers to achieve faster, more accurate claims and policy resolutions.
Shift Technology is focusing on continuous deployment in the UK and the US, whilst exploring opportunities in Singapore, as it attempts to become an international player in the market. However, it must stave off a number of major competitors to do so, including Quantemplate, Slice and Neos.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
-1% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
May 2021
$220m
SERIES D
Mar 2019
$61.6m
SERIES C
Total funding: $321.6m
Company benefits
- Flexible remote and hybrid working options
- Competitive Salary and a variable component tied to personal and company performance
- Company equity
- Generous PTO and paid holidays
- Parental leave opportunities
- Extensive mental health benefits provided via our global Employee Assistance Program
- Paid volunteering time - 16 hours annually
Company HQ
Bercy, Paris, France
Leadership
Jeremy Jawish
(CEO)Experience in fraud detection solution development for AXA in 2011, and as an FICC Strategist for Goldman Sachs in 2012.
Eric Sibony
(CSO)PhD in machine learning from 2012-2016, and has been CSO since 2013.
David Durrleman
(Fellow Engineer)Experience as a Fixed Income Strategist for Goldman Sachs between 2008-2013.
Share this job
View 16 more jobs at Shift Technology