Senior Security Analyst
New
O
OpenSesameWorkforce learning
This position can be based anywhere in the US.Full-TimeSenior
Salary130,000 - 190,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWSPythonGCPRESTful APIs
Requirements
- Demonstrated experience owning penetration testing programs.
- Demonstrated experience building vulnerability management systems.
- Demonstrated experience implementing security automation.
- Experience helping organizations adopt modern technologies, including AI, securely and responsibly.
- Technical expertise spanning vulnerability management, penetration testing, bug bounty operations, cloud security, and application security.
- Experience with AWS and GCP security environments.
- Experience with Python, APIs, and Make for automation and tooling.
- Familiarity with Drata evidence collection and control mapping workflows.
- Knowledge of OWASP Top 10 for LLMs and AI systems and ISO 42001 controls.
- Ability to support audits aligned with ISO 27001, ISO 27701, and ISO 42001.
Responsibilities
- Develop a comprehensive view of the external attack surface, vulnerabilities, and threat landscape using signals from CrowdStrike, AWS, GCP, and application security tooling.
- Own external penetration testing engagements end-to-end, including vendor selection, scoping, oversight, remediation validation, and executive reporting.
- Build and operationalize a vulnerability management program with DevOps, Engineering, and IT.
- Establish evidence collection and control mapping workflows in Drata to improve audit readiness.
- Design a continuous penetration testing program using automation, threat modeling, and targeted validation.
- Own and mature the bug bounty program, including triage, researcher engagement, and remediation workflows.
- Implement AI security practices, including applying OWASP Top 10 for LLMs and AI systems and operationalizing ISO 42001 controls.
- Develop security automations and tooling with Python, APIs, and Make across AWS, GCP, GitHub, and SaaS platforms.
- Improve Jira and Confluence workflows for security findings and remediation.
- Support audits and compliance work aligned with ISO 27001, ISO 27701, and ISO 42001.
View Full Description & ApplyYou'll be redirected to the employer's site
