About the Role
This senior technical security role focuses on product and platform security, setting standards and guardrails for development. The position involves hands-on collaboration with engineers to ensure secure building practices, owning secure development standards, conducting threat modeling, and directing cloud security, identity, vulnerability management, and data protection strategies. A key aspect is elevating the security knowledge of engineering and product teams to enable informed, in-team decision-making.
Responsibilities
- Provide practical, hands-on security advice to engineers throughout the development lifecycle.
- Own secure development and coding standards, and coordinate penetration testing.
- Conduct threat modeling on high-risk work and train teams to perform their own.
- Set security standards for cloud environments, including configuration, access, and encryption.
- Determine vulnerability severity and remediation priorities.
- Design strategies for identity and privileged access management.
- Lead data security initiatives, including classification, data separation, and DLP tooling.
- Apply security judgment to assessments of high-risk suppliers.
Requirements
- Significant experience in a senior or principal security architecture or application security role, preferably in a fast-growing, cloud-based software company.
- Strong hands-on cloud security background, including secure configuration, access, identity, encryption, and guardrails for modern cloud and serverless architectures.
- Solid understanding of secure software development, including threat modeling, secure coding, common application security risks (e.g., OWASP Top 10), automated security testing, and penetration testing.
- Practical experience in vulnerability management, identity and privileged access, data security, and software supply-chain practices (e.g., SBOMs).
- A pragmatic approach that facilitates rapid engineering progress.
- Clear communication skills to influence technical and non-technical stakeholders and translate security risks into actionable decisions.
- Willingness to explore and pragmatically apply AI to enhance product security.
- Experience in InsurTech, FinTech, or another regulated industry is a plus.
- Experience building security functions or practices from an early stage is a plus.
- Experience integrating security into modern engineering delivery is a plus.
- Experience with software serving many customers from shared infrastructure and associated data-separation challenges is a plus.
- Relevant certifications (e.g., CISSP, CCSP, AWS security qualification) are beneficial but not mandatory.
- Experience training and coaching engineers on security is a plus.
- Background checks, including criminal record, credit history, previous employer references, and academic qualifications, will be conducted.
Skills
- Cloud Security
- Identity and Access Management
- Vulnerability Management
- Data Protection
- Threat Modeling
- Secure Development Standards
- Secure Coding
- Penetration Testing
- Cloud Configuration
- Encryption
- Data Loss Prevention (DLP)
- Software Supply Chain Security
- SBOMs
- AI in Security
Location
- London
Work Type
- On-site
- Full-time
Experience Level
- Senior
- Principal
Education Level
- Relevant certifications such as CISSP, CCSP or an AWS security qualification are beneficial but not mandatory.
Benefits
- Private medical insurance
- Income protection insurance
- Life insurance of 4 * base salary
- On-site gym and shower facilities
- Enhanced maternity and paternity pay
- Team social events and company parties
- Salary exchange on pension and nursery fees
- Access to Maji, the financial wellbeing platform
- Company stock options managed through Ledgy
- Milestone Birthday Bonus and a Life Events leave policy
- Generous holiday allowance of 28 days plus national holidays
- Home office and equipment allowance
- Company MacBook
- Learning allowance and leave to attend conferences or take exams
- YuLife employee benefits, including EAP and bereavement helplines
- Tree planting through Ecologi Action partnership
- High-quality coffee machine
About the Company
- Artificial is building the next generation of technology for the specialty (re)insurance market.
- Their mission is to transform how brokers and carriers operate by removing operational barriers and enabling smarter, faster decision-making.
- They use modern technology to automate repetitive tasks and structure complex processes, helping partners unlock innovation and growth.
- The company fosters a collaborative environment valuing curiosity, ownership, and continuous learning.
- Artificial recently raised $45M (£33M) in Series B funding from lead investor CommerzVentures, Move Capital, and existing shareholders.
- This investment will support growth, innovation, and maintaining their position as a preferred choice for digital trading in the insurance sector.
Equal Opportunity
- Proud to be an equal opportunities employer committed to building a diverse team.
- Adjustments can be made to the hiring process to ensure accessibility.
- Candidates are welcome to share their preferred pronouns.
- Encourages applications even if not all requirements are met, valuing potential and raw talent.
- Background checks are part of the hiring process.
