Serve as an App Security Architect with deep expertise in endpoint detection identity governance and privileged access management to protect complex applications for a Property and Casualty Insurance portfolio. Design scalable security architectures using CrowdStrike Falcon Insight Sailpoint IdentityNow and CyberArk PIM in a hybrid work model while collaborating with cross functional teams to reduce risk and support business innovation.
Responsibilities
- Design and architect end to end application security solutions that align CrowdStrike Falcon Insight Sailpoint IdentityNow and CyberArk PIM controls with core Property and Casualty Insurance platforms to reduce cyber risk and operational exposure.
- Implement and optimize CrowdStrike Falcon Insight policies for servers endpoints and application workloads to improve threat visibility detection accuracy and response effectiveness across the insurance technology landscape.
- Define privileged access strategies using CyberArk PIM for underwriting claims billing and policy administration systems to protect highly sensitive data and critical platform services.
- Configure Sailpoint IdentityNow based access governance models for application roles and entitlements so that user lifecycle events adhere to regulatory expectations for Property and Casualty Insurance.
- Review analyze and enhance application security designs including data flows integration patterns and control points to ensure secure handling of policyholder agent broker and partner information.
- Develop and maintain reference security architectures design patterns and configuration standards that guide engineering teams in building secure scalable and compliant insurance applications.
- Collaborate with product owners enterprise architects security operations and application engineers to embed security requirements early in the lifecycle and to resolve design trade offs without slowing business delivery.
- Conduct security risk assessments and threat modeling exercises for new and existing Property and Casualty Insurance initiatives with a focus on exploiting paths involving identities privileges and endpoints.
- Guide development and DevOps teams on secure coding practices integration of security tooling and effective use of CrowdStrike Sailpoint and CyberArk capabilities throughout build and release pipelines.
- Create clear technical documentation solution diagrams and configuration runbooks that enable smooth operations future enhancements and audit readiness for all application security components.
- Monitor security metrics incident trends and audit findings to identify architecture level improvements and to drive measurable reduction in exposure for underwriting and claims platforms.
- Partner with compliance risk and internal audit stakeholders to ensure that security architectures and control implementations support regulatory obligations and industry best practices in insurance.
- Provide mentorship and knowledge sharing to engineering and security colleagues on advanced topics such as identity governance privileged access flows and endpoint protection strategies in insurance settings.
Qualifications
- Require a proven background of twelve to fourteen years in application security architecture or closely related security engineering roles with significant hands on design work.
- Require solid and recent practical expertise with CrowdStrike Falcon Insight including policy design alert tuning and integration with monitoring or case management tools.
- Require deep functional experience with Sailpoint IdentityNow covering identity lifecycle management access certification and role based access models for complex enterprises.
- Require solid experience implementing and operating CyberArk PIM solutions including credential vaulting session monitoring and privileged access workflows for business critical systems.
- Require sound understanding of Property and Casualty Insurance processes such as underwriting claims handling policy servicing and rating so that security controls fit real business needs.
- Require strong knowledge of application security principles secure integration patterns data protection strategies and common attack vectors across modern cloud enabled architectures.
- Prefer exposure to hybrid work environments and distributed teams with proven ability to collaborate effectively using remote friendly ways of working during standard day shifts.
- Prefer experience working within regulated financial or insurance organizations where audit compliance and risk management requirements significantly shape security design decisions.
- Prefer relevant academic background in computer science information security or similar discipline combined with ongoing professional development in modern security technologies.
Certifications Required Certified Information Systems Security Professional or Certified Cloud Security Professional or vendor certifications for CrowdStrike Sailpoint or CyberArk are strongly preferred