Security Architect

OVERVIEW

If you dream of being part of a global company on a fast growth journey, read on. At Fadata, we pride ourselves of being rapid in changing with our market and customers’ needs. This also means that you should be ready to change when circumstances do. If you are up for a fast and fun ride in a company where the strategy is set while we still have room to change with the market, then hit the apply button.

We have a dream of becoming the industry standard in core software solutions for the insurance industry across the globe – and technically doing so by being a real cloud-native solution scaling to the sky. And we want to achieve that with you.

OPPORTUNITY

We are looking for a skilled Security Architect to guide us through the journey of becoming a trusted Service Provider.

YOUR RESPONSIBILITIES

• Design and develop services and solutions based on cloud security-based practices – CSA CCM and BSI C5.
• Perform risk assessment of proposed and existing system architecture for compliance with security best practices, recommending technical, administrative and physical controls to mitigate identified risks.
• Develop service security and compliance requirements for SaaS multi-tenant systems.
• Design and develop cloud security architectures and perform architecture design reviews.
• Design and develop frameworks and solutions to secure cloud applications and infrastructure.
• Lead and execute end to end compliance initiatives, based on selected industry frameworks and compliance standards.
• Implement, maintain, and improve existing industry best practices of operational security controls such as: Monitoring, Identity and access management, Encryption and data security, Self-auditing.
• Provide guidance to Product Management on defining and prioritizing development of secure SaaS solutions.
• Drive and lead security processes, tools, methods, and knowledge and security enhancements.
• Prepare and deliver training and security awareness activities to the Engineering teams.
• Acquire relevant knowledge, remain up to date, attend security conferences and be involved in the security community.

WHAT YOU BRING TO THE TABLE

• Very good command of English.
• Master’s degree in computer science, information technology, or a related field.
• 5+ years of experience in information security.
• 3+ years of experience focused on cloud security.
• In-depth knowledge of Cloud platforms with emphasis on security operations and frameworks such as CSA CCM, BSI C5.
• An industry-recognized certificate in the information security area will be considered a serious advantage (e.g., CISSP, CCSK, or AWS Certified Security).

Experience in:

• Identity and Access Management: Protect data from unauthorized access while allowing authorized users to access it. MFA adoption and enforcement. Understanding of Active Directory, LDAP, SAML, OAuth. AWS IAM policies.
• Cloud Security: Understand and be able to apply best practices for securing cloud environments. CIS Hardening procedures. Establish security controls and comply with regulations.
• Network Security: Balance business and security requirements to ensure a safe and functional network. Web application and API firewalls experience. Know the tools that facilitate AWS logs capture and processing, and the recommended practices to centralize and secure AWS logs.
• Software Development and DevSecOps: Experience in software development (SDLC) helps implement security principles effectively. Secure SaaS practices. Familiarity with Linux, Windows, and Mac operating systems, addressing unique security concerns for each. Security reviews for code/design/architecture and requirements. Experience doing code review for configuration management tools and scripting languages.
• Risk assessment and management, threat modelling and analysis. Focus on cyber risks.
• Excellent communication and interpersonal skills.
• Strong attention to detail.
• Demonstrated ability to assume sole and independent responsibilities.
• Ability to keep track of numerous detail-intensive, interdependent tasks and ensure their accurate completion.

WHY YOU SHOULD JOIN US

• Become part of a fast-growing insurance software vendor with multinational teams across Europe. Currently we have offices in over 7 different countries including Bulgaria (Sofia & Burgas), Germany (Munich), Denmark (Copenhagen), Spain (Madrid), Lima (Peru), Kuala Lumpur (Malaysia), Belgrade (Serbia)
• Our diverse backgrounds has led to a collaborative and innovative work environment, where we value unique perspectives and experiences. At Fadata we are more than just coworkers – we are a team of professional and passionate individuals from over 20+ different countries.
• We have a flexible home office policy
• Receive a competitive remuneration package together with great opportunities for personal and professional growth.
• A positive company culture built around people’s wellbeing.
• No meetings time when we can focus on our main tasks.
• Work in a dynamic environment with an exceptional team that is always ready to help.
• A half-day off the second Friday of the month, so you focus on passion projects, boost your creativity or spend time with your loved ones.
• Sea Camp – one week a year we go to the seaside in Bulgaria to work from our office facing the Black Sea and to have a nice time with the team
• Join us and become part of a team that is changing the insurance industry through technology for the better.

ABOUT US

Fadata is a leading provider of software solutions for insurance companies globally. We are on a mission to empower the insurance industry to drive customer engagement, innovation and business value. Together with our customers we are on a journey to build the future of insurance and impact millions of people’s lives every day. Fadata has clients in over 30 countries across the globe. Headquartered in Munich, with offices in more than five European cities, Fadata is backed by Private Equity Riverside and Lowell Minnick.

We provide the heart of the insurance industry with the next generation of core insurance platform. We use end-to-end, flexible cloud services for all insurance processes across Life, P&C and Health, harnessing open ecosystems. Our values include building trust, engaging in open communication where feedback is welcome, being passionate about the value we deliver, innovating our product, and showing care, empathy and respect for one another. We embrace cultural differences and support diversity.

We are making the world a safer place by empowering insurance innovation. We want you to become part of our exceptional team who are driving insurance innovation forward.