Senior Security Analyst
New
O
OpenSesameSecurity compliance
This position can be based anywhere in the US.Full-TimeSenior
Salary130,000 - 190,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPython
Requirements
- Bring proven examples of owning penetration testing programs.
- Bring proven examples of building vulnerability management systems.
- Bring proven examples of implementing security automation.
- Have helped organizations adopt modern technologies, including AI, securely and responsibly.
- Be able to oversee external penetration testing from vendor selection and scoping through remediation validation and executive reporting.
- Apply OWASP Top 10 for LLMs and AI systems to identify and mitigate risks.
- Work with Python, APIs, and Make to develop security automation.
- Work with AWS, GCP, GitHub, and SaaS platforms on security baselines and drift detection.
Responsibilities
- Develop a view of the external attack surface, vulnerabilities, and threat landscape using signals from CrowdStrike, AWS, GCP, and application security tooling.
- Own external penetration testing engagements, including vendor selection, scope design, execution oversight, remediation validation, and executive reporting.
- Build and operationalize a vulnerability management program with DevOps, Engineering, and IT.
- Establish evidence collection and control mapping workflows in Drata to improve audit readiness.
- Design continuous penetration testing and mature the bug bounty program, including triage, researcher engagement, and remediation workflows.
- Implement AI security practices using OWASP Top 10 for LLMs and AI systems and support adoption of ISO 42001 controls.
- Develop Python, API, and Make automations to collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms.
- Improve Jira and Confluence workflows and support audits aligned with ISO 27001, ISO 27701, and ISO 42001.
View Full Description & ApplyYou'll be redirected to the employer's site
