Security Analyst, NHI – Non-Human Identity

🕒 Outubro 12

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 16%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 31 dias.
• As vagas desta empresa costumam ser preenchidas em 21 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

GuidePoint Security

SiteLinkedInTodas as Vagas

201 - 500 funcionários

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A GuidePoint Security é uma empresa de cibersegurança que oferece serviços de consultoria, engenharia e serviços gerenciados para ajudar as organizações a protegerem seus ativos digitais. A empresa é especializada em segurança de aplicações, segurança em nuvem, proteção de dados, segurança de e-mails, inteligência contra ameaças e gerenciamento de identidade e acesso. Com soluções adaptadas para várias plataformas, incluindo AWS, Microsoft, Google Cloud e ambientes OT, a GuidePoint Security visa aprimorar a resiliência cibernética para clientes empresariais e governamentais. Eles focam em integrar tecnologias avançadas de segurança e fornecer expertise em avaliação de riscos, conformidade e educação em conscientização sobre segurança, ajudando os clientes a enfrentar desafios complexos de cibersegurança e melhorar sua postura de segurança.

Descrição

• Support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments • Serve as a senior subject matter expert for service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials • Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes • Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities • Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles • Use NHI security platforms to discover, analyze, monitor, and remediate non-human identities • Develop NHI risk scoring and prioritization models • Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms • Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms • Establish NHI ownership and accountability with application, development, infrastructure, DevOps, cloud engineering, and security teams • Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement • Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms • Analyze authentication and activity data for anomalous or suspicious non-human identity behavior • Support least privilege and just-in-time access for workloads, applications, APIs, and machine identities • Develop automation for NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement • Define and maintain NHI security standards, procedures, control requirements, and operating processes • Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments • Develop dashboards and metrics tracking NHI security posture, inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance • Collaborate with PAM and IAM teams on human, privileged, and non-human identity management boundaries and integration • Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives • Stay current on NHI threats, attack techniques, standards, and technologies • Mentor junior analysts and contribute to NHI security playbooks, standards, and reusable analytical processes

🎯 Requisitos

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline • 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management • Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement • Strong understanding of service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities • Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms • Experience discovering and analyzing NHIs across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments • Strong understanding of AWS, Azure, and/or GCP identity and access management • Understanding of DevOps and CI/CD environments, including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and other automation platforms • Strong understanding of secrets management and credential security, including vaulting, rotation, expiration, and detection of exposed or hardcoded credentials • Experience analyzing identity relationships and access paths to identify excessive privilege, lateral movement opportunities, toxic combinations, and potential attack paths • Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles • Experience integrating security and identity platforms with SIEM, SOAR, ITSM, PAM, IAM, CSPM, CIEM, and DevSecOps tools • Strong analytical and problem-solving skills • Ability to work effectively with application owners, developers, DevOps engineers, cloud engineers, infrastructure teams, security architects, and risk/compliance teams • Strong documentation and communication skills, including translating technical NHI risks into business and security impact • Experience developing security controls, procedures, remediation plans, dashboards, and operational playbooks • Ability to embrace emerging technologies, including AI tools • Preferred experience with Oasis Security, Clutch Security, Entro, CyberArk, Delinea, BeyondTrust, HashiCorp Vault, OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, SSH, Python, PowerShell, and REST APIs • Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or IAM/PAM certifications are preferred • Sedentary work and substantial wrist, hand, and/or finger movement for a minimum of 8 hours a day • Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

🏖️ Benefícios

• Remote workforce primarily (U.S. based only) • Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums • HSA contribution of $850 annually for employees or $1,750 annually for families • Group Dental Insurance with GuidePoint paying 100% of employee premiums and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Up to 10% travel may be required

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo