Security Analyst, NHI (Non-Human Identity)

New

Remote; U.S. based onlyFull-TimeSenior

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Experience: 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline; 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management.
Required Skills: AWSPythonGCPKubernetesAzure

5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline.
2+ years of experience with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management.
Strong understanding of the NHI security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement.
Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms.
Experience discovering and analyzing NHIs across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments.
Strong understanding of AWS, Azure, and/or GCP identity and access management.
Understanding of DevOps and CI/CD environments, including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and automation platforms.
Strong understanding of secrets management and credential security, including vaulting, rotation, expiration, and detection of exposed or hardcoded credentials.
Experience analyzing identity relationships and access paths to identify excessive privilege, lateral movement opportunities, toxic combinations, and potential attack paths.
Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles.
Preferred experience with Oasis Security, Clutch Security, and Entro or comparable NHI security platforms.
Up to 10% travel.

Develop NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes across enterprise environments.
Assess non-human identities to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk accounts and credentials.
Define and implement security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles.
Use NHI security platforms to discover, analyze, monitor, and remediate non-human identities.
Develop risk-scoring and prioritization models based on privileges, exposure, usage, ownership, credential type, business criticality, and potential blast radius.
Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms.
Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms.
Analyze authentication and activity data for anomalous or suspicious non-human identity behavior.
Develop automation, standards, procedures, dashboards, and metrics for NHI discovery, remediation, credential rotation, ownership, and policy compliance.
Collaborate with application, development, infrastructure, DevOps, cloud engineering, security, PAM, and IAM teams; support reviews, audits, strategy, and technology evaluations.

View Full Description & ApplyYou'll be redirected to the employer's site