Senior Product Security Engineer

Summary

Join our team as a Senior Product Security Engineer and serve as a crucial technical authority in defining the security framework of our leading SaaS insurance platforms. Security at our company is foundational to the confidence we cultivate with more than 540 insurance clients worldwide.

Role Overview

In this senior position, you will transcend conventional security tasks to drive broad technological and cultural advancements. You will collaborate closely with engineering and product divisions to embed security from the earliest stages throughout our CI/CD pipelines, cloud infrastructure, and foundational product designs. Success will be gauged by the lasting security solutions you implement and the mutual trust you foster organization-wide.

Key Responsibilities

• Maintain technical ownership and manage key relationships by advancing the product security architecture for designated SaaS services, steering extended projects that mitigate systemic vulnerabilities while aligning security efforts with business expansion.
• Lead secure system design reviews, threat modeling exercises, and architectural evaluations for vital features, actively working alongside engineering teams to integrate comprehensive security measures within distributed systems, APIs, and containerized environments.
• Detect recurring architectural risks and spearhead large-scale remediation initiatives. Provide leadership during security incidents and post-incident assessments to institute improvements enhancing resilience.
• Influence product strategy through technical expertise and sound judgment, presenting security matters in the context of business objectives to support proactive, informed decision-making.
• Develop and maintain enduring documentation such as architecture guidelines, threat models, and decision logs to propagate security knowledge throughout the company.

Required Qualifications

• Extensive expertise in SaaS product security disciplines including identity and access management, authentication and authorization protocols, data protection, cloud and container security (AWS, Kubernetes), API security, and zero trust models.
• Proven capability to navigate complex architectural choices with well-reasoned trade-offs that balance security thoroughness and development efficiency.
• Advanced skills in structured threat modeling and risk assessment for sophisticated cloud-based systems.
• Excellent communication skills with the ability to translate intricate security concepts for diverse audiences, both technical and non-technical.
• Strong collaborative skills demonstrated by building trusted partnerships with product management, engineering, site reliability engineering, and compliance teams.
• Commitment to elevating organizational security standards by mentoring peers and stakeholders, cultivating security awareness, and modeling high standards in quality and accountability.
• A growth mindset coupled with a relentless passion for learning and problem-solving, utilizing people, processes, and technology to overcome challenges.
• Preferred but not mandatory credentials include certifications like OSWE, OSCP, and AWS Security or comparable experience with proven knowledge.

Expected Impact

• Within six months, establish trusted partnerships, lead platform architecture reviews, and identify systemic security risks.
• Over time, contribute to a tangible reduction in product risk, create shared standards and reference designs permitting safe, scalable releases, and shape the long-term technology direction of the leading property and casualty insurance platform.

About Our Company

We deliver the trusted platform solution for property and casualty insurance providers globally. Our cloud-based services integrate digital, core, analytics, and AI components, serving over 540 insurers in 40 countries ranging from startups to the largest enterprises. We pride ourselves on an unmatched implementation record, backed by the largest research and development team and partner network in the industry. Our marketplace offers numerous applications to accelerate integration, localization, and innovation.

Diversity and Inclusion

Our company is an equal opportunity and affirmative action employer devoted to an inclusive workplace where diverse perspectives and abilities fuel our success. All qualified candidates will be considered without discrimination on any legally protected grounds. Employment offers are contingent on background checks where applicable.