Security Analyst, NHI – Non-Human Identity

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments • Serve as a senior subject matter expert for service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials • Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes • Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities • Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles • Use NHI security platforms to discover, analyze, monitor, and remediate non-human identities • Develop NHI risk scoring and prioritization models • Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms • Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms • Establish NHI ownership and accountability with application, development, infrastructure, DevOps, cloud engineering, and security teams • Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement • Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms • Analyze authentication and activity data for anomalous or suspicious non-human identity behavior • Support least privilege and just-in-time access for workloads, applications, APIs, and machine identities • Develop automation for NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement • Define and maintain NHI security standards, procedures, control requirements, and operating processes • Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments • Develop dashboards and metrics tracking NHI security posture, inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance • Collaborate with PAM and IAM teams on human, privileged, and non-human identity management boundaries and integration • Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives • Stay current on NHI threats, attack techniques, standards, and technologies • Mentor junior analysts and contribute to NHI security playbooks, standards, and reusable analytical processes

🎯 Requirements

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline • 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management • Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement • Strong understanding of service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities • Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms • Experience discovering and analyzing NHIs across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments • Strong understanding of AWS, Azure, and/or GCP identity and access management • Understanding of DevOps and CI/CD environments, including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and other automation platforms • Strong understanding of secrets management and credential security, including vaulting, rotation, expiration, and detection of exposed or hardcoded credentials • Experience analyzing identity relationships and access paths to identify excessive privilege, lateral movement opportunities, toxic combinations, and potential attack paths • Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles • Experience integrating security and identity platforms with SIEM, SOAR, ITSM, PAM, IAM, CSPM, CIEM, and DevSecOps tools • Strong analytical and problem-solving skills • Ability to work effectively with application owners, developers, DevOps engineers, cloud engineers, infrastructure teams, security architects, and risk/compliance teams • Strong documentation and communication skills, including translating technical NHI risks into business and security impact • Experience developing security controls, procedures, remediation plans, dashboards, and operational playbooks • Ability to embrace emerging technologies, including AI tools • Preferred experience with Oasis Security, Clutch Security, Entro, CyberArk, Delinea, BeyondTrust, HashiCorp Vault, OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, SSH, Python, PowerShell, and REST APIs • Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or IAM/PAM certifications are preferred • Sedentary work and substantial wrist, hand, and/or finger movement for a minimum of 8 hours a day • Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

🏖️ Benefits

• Remote workforce primarily (U.S. based only) • Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums • HSA contribution of $850 annually for employees or $1,750 annually for families • Group Dental Insurance with GuidePoint paying 100% of employee premiums and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Up to 10% travel may be required