Senior Security Analyst

🕒 6 dias atrás

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $130.000 - $190.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 7 dias.
• As vagas desta empresa costumam ser preenchidas em 66 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

OpenSesame

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2011

💼 Consultoria

🏥 Saúde

📣 Marketing

Consulting • Healthcare • Marketing

A OpenSesame é uma empresa especializada em fornecer soluções abrangentes de treinamento online para negócios em diversos setores. Ela oferece um mercado robusto de cursos que atendem a várias necessidades de treinamento, como conformidade, liderança, gestão, diversidade, equidade, inclusão, bem-estar e tecnologia. A OpenSesame foca em integrar-se perfeitamente com as pilhas de tecnologia existentes e fornece ferramentas e orientação especializada para ajudar as empresas a criar trajetórias de desenvolvimento de habilidades adaptadas aos seus objetivos específicos. Desde 2011, a OpenSesame tem se dedicado a desbloquear o potencial dos funcionários ao redor do mundo, fechando lacunas críticas de habilidades e aprimorando programas de treinamento no local de trabalho.

Descrição

• Strengthen OpenSesame’s security posture as a Senior Security Analyst on the Compliance team • Manage vulnerability management, penetration testing, bug bounty operations, cloud security, application security, and audit readiness • Partner with Engineering, DevOps, IT, and Compliance to improve security processes and support compliance efforts • Develop a comprehensive view of the external attack surface, vulnerabilities, and threat landscape • Own external penetration testing engagements, including vendor selection, scope design, execution oversight, remediation validation, and executive reporting • Build and operationalize a structured vulnerability management program • Establish evidence collection and control mapping workflows in Drata • Design and implement continuous penetration testing programs • Improve bug bounty signal quality, triage, researcher engagement, and remediation workflows • Lead implementation of AI security practices across internal systems and product development • Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks • Support adoption and operationalization of ISO 42001 controls • Define secure usage patterns for internal AI tools and third-party AI integrations • Define and enforce secure AI and application baseline requirements with Product Engineering • Develop security automations and tooling using Python, APIs, and Make • Continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms • Improve Jira and Confluence workflows for security findings and remediation • Provide technical support during audits aligned with ISO 27001, ISO 27701, and ISO 42001 • Support vendor reviews, customer security questionnaires, and control design • Evolve secure development practices, CI/CD security controls, and cloud security baselines • Establish AI security governance models • Identify systemic risks, recurring vulnerability patterns, and process inefficiencies • Contribute to long-term security strategy

🎯 Requisitos

• Proven examples of owning penetration testing programs • Proven experience building vulnerability management systems • Proven experience implementing security automation • Proven experience helping organizations adopt modern technologies, including AI, securely and responsibly • Ability to develop a comprehensive view of external attack surface, vulnerabilities, and threat landscape • Experience with CrowdStrike, AWS, GCP, and application security tooling • Experience owning external penetration testing engagements end-to-end • Experience building and operationalizing vulnerability management programs • Experience with Drata evidence collection and control mapping workflows • Experience with continuous penetration testing, automation, and threat modeling • Experience owning and maturing bug bounty programs • Knowledge of OWASP Top 10 for LLMs / AI systems • Knowledge of ISO 42001 controls • Ability to define secure usage patterns for internal AI tools and third-party AI integrations • Experience with Python, APIs, and Make • Experience with AWS, GCP, GitHub, and SaaS platforms • Experience with Jira and Confluence workflows • Knowledge of ISO 27001, ISO 27701, and ISO 42001 • Experience with secure development practices, CI/CD security controls, and cloud security baselines • Ability to establish AI security governance models • Position can be based anywhere in the US • Ability to travel up to 15 days per year; senior management and leadership teams up to 35 days

🏖️ Benefícios

• professional development • ISOs • health insurance • 401(k) matching • paid time off • comprehensive medical, dental, and vision coverage • flexible PTO • incentive stock options • volunteer time off • Employee Resource Groups • generous professional development program with dedicated annual time off for learning and growth • hands-on AI training and clear guardrails to experiment responsibly • Remote-first work arrangement • Mandatory all-company meetings several times a year • Required team travel as necessary

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo