Senior Security Analyst Full Time

We’re seeking a curious, analytical, and highly independent Security Analyst to join Shopify’s Identity and Access Management (IAM) team. In this pivotal role, you will apply a data-driven approach to deeply analyze the effectiveness and user experience of our internal security controls and identity systems. Your work will directly enhance the security of our global operations, protect our merchants, and ensure Shopify’s rapid pace of development is supported by robust yet user-friendly access mechanisms.

You will be a trusted partner collaborating closely with security engineers, system administrators, and diverse cross-functional teams. Your contributions will be essential in refining and improving our security controls, ensuring they are not only effective but also enable Shopify’s rapid innovation. This is not just about identifying problems; it’s about providing the insights and analysis needed to build better, more intuitive security.

This role offers a unique opportunity to apply your technical curiosity and analytical mindset to understand and manage security risk within a dynamic environment. You will be at the forefront of analyzing, monitoring, and improving foundational technical controls, focusing on their real-world impact and effectiveness across Shopify’s programs, platforms, and products.

Key Responsibilities:

Lead and contribute to projects that build out and harden security at Shopify.

Conduct in-depth analysis of the security and employee impact of our current and future IAM security controls, advocating for solutions that balance strong security with optimal user experience.

Contribute to identifying and advocating for opportunities to automate and improve security workflows and tasks, providing analysis that guides engineering and operations teams.

Proactively identify gaps in existing security controls during incidents or reviews, providing actionable analysis to inform engineering and operational solutions.

Utilize data and key metrics to understand and measure the effectiveness of Shopify’s security controls and IAM program.

Qualifications:

• Demonstrated technical curiosity and a drive to independently investigate complex systems and challenges.
• Strong analytical skills with the ability to design experiments, collect diverse data, and derive actionable insights from complex datasets.
• Proven experience with SQL and building data dashboards for analysis and reporting.
• Coding literacy: Ability to understand and interpret code (e.g., for system analysis) to analyze control functionality.
• Experience leveraging AI tools for code interpretation is a plus.
• Effective communication skills, with a proven ability to translate complex technical concepts and data findings into clear, compelling narratives.
• An understanding of information security fundamentals, privacy, and compliance standards.
• Familiarity with concepts of identity providers (e.g., Okta) and access management at scale.
• Exceptional ability to create and maintain trusted relationships across the organization, approaching interactions with a non-judgmental and collaborative mindset.
• Experience in roles requiring significant independence and problem-solving, even if the primary domain was not security (e.g., technical support, operations, program coordination).

About Shopify

Opportunity is not evenly distributed. Shopify puts independence within reach for anyone with a dream to start a business. We propel entrepreneurs and enterprises to scale the heights of their potential. Since 2006, we’ve grown to over 8,300 employees and generated over $1 trillion in sales for millions of merchants in 175 countries.

This is life-defining work that directly impacts people’s lives as much as it transforms your own. This is putting the power of the few in the hands of the many, is a future with more voices rather than fewer, and is creating more choices instead of an elite option.

About you

Moving at our pace brings a lot of change, complexity, and ambiguity—and a little bit of chaos. Shopifolk thrive on that and are comfortable being uncomfortable. That means Shopify is not the right place for everyone.

Before you apply, consider if you can:

• Care deeply about what you do and about making commerce better for everyone
• Excel by seeking professional and personal hypergrowth
• Keep up with an unrelenting pace (the week, not the quarter)
• Be resilient and resourceful in face of ambiguity and thrive on (rather than endure) change
• Bring critical thought and opinion
• Use AI tools reflexively as part of your fundamental workflow
• Embrace differences and disagreement to get shit done and move forward
• Work digital-first for your daily work