Senior Technical Security Analyst, Third Party Security Remote - Americas

Shopify; Ontario; Remote; CAD 90,000 - 120,000; Full time

Job summary

Join a leading company as a Senior Technical Security Analyst, where you will manage third-party vendor risk, build automated controls, and collaborate with cross-functional teams to enhance security. Your expertise will help shape security practices and ensure compliance while using innovative technologies.

Qualifications

• Experience building and maintaining security controls.
• Understanding of cloud technologies and infrastructure as code.
• Excellent communication skills.

Responsibilities

• Architect and build technical controls to reduce toil.
• Monitor technology stack to reduce security risk.
• Collaborate with teams for assessments and implementations.

Skills

Communication

Automation

Cloud Technologies

Information Security Fundamentals

Relationship Management

Tools

Google

Okta

Jamf

Slack

Freshworks

macOS

GitHub

Job description

We're looking for curious and detail-oriented individuals to join Shopify's Third Party Security team as a Senior Technical Security Analyst.

As a Senior Technical Security Analyst, you'll leverage your expertise in technology and security, along with your knowledge of Shopify's products, applications, and infrastructure, to understand and manage third-party vendor risk. You'll use technology to build controls and operate them autonomously. You'll work closely with many teams across Shopify to understand how new tools, technologies, and services can help Shopifolk get things done while keeping security top of mind.

The role will provide an opportunity to :

1. Architect and build technical controls which leverage automation to reduce toil.
2. Monitor Shopify's current technology stack and implement technical changes to reduce security risk.
3. Collaborate with cross-functional teams and gather evidence for assessments, implementations, and use of new tools and workflows.
4. Evaluate and determine the security risk of using third-party services at Shopify.
5. Lead and contribute to projects that build out and harden security at Shopify.
6. Utilize data and key metrics to understand Shopify's security program.
7. Develop and share security best practices.

Qualifications

It would be great if you had experience in one or more of the following (don't stress, we are not expecting experience in all of the following!) :

1. Experience autonomously building and maintaining controls and security safeguards for frameworks.
2. Experience using automation to simplify security and IT practices.
3. An understanding of cloud technologies, containerized environments, and infrastructure as code.
4. An understanding of information security fundamentals, privacy, and compliance standards.
5. Ability to create and maintain trusted relationships.
6. Excellent communication skills, including technical breakdowns.
7. Passion for documenting strategy and approach.
8. Familiarity with one or more of the following tools: Google, Okta, Jamf, Slack, Freshworks, macOS, and GitHub.