Senior Security Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $130k - $190k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

OpenSesame

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2011

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

OpenSesame is a company that specializes in providing comprehensive online training solutions for businesses across various industries. It offers a robust marketplace of courses that cater to numerous training needs such as compliance, leadership, management, diversity, equity, inclusion, wellness, and technology. OpenSesame focuses on integrating seamlessly with existing tech stacks and provides tools and expert guidance to help businesses craft skill-building paths tailored to their specific goals. Since 2011, OpenSesame has been dedicated to unlocking the potential of employees around the globe by closing critical skill gaps and enhancing workplace training programs.

📋 Description

• Strengthen OpenSesame’s security posture as a Senior Security Analyst on the Compliance team • Manage vulnerability management, penetration testing, bug bounty operations, cloud security, application security, and audit readiness • Partner with Engineering, DevOps, IT, and Compliance to improve security processes and support compliance efforts • Develop a comprehensive view of the external attack surface, vulnerabilities, and threat landscape • Own external penetration testing engagements, including vendor selection, scope design, execution oversight, remediation validation, and executive reporting • Build and operationalize a structured vulnerability management program • Establish evidence collection and control mapping workflows in Drata • Design and implement continuous penetration testing programs • Improve bug bounty signal quality, triage, researcher engagement, and remediation workflows • Lead implementation of AI security practices across internal systems and product development • Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks • Support adoption and operationalization of ISO 42001 controls • Define secure usage patterns for internal AI tools and third-party AI integrations • Define and enforce secure AI and application baseline requirements with Product Engineering • Develop security automations and tooling using Python, APIs, and Make • Continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms • Improve Jira and Confluence workflows for security findings and remediation • Provide technical support during audits aligned with ISO 27001, ISO 27701, and ISO 42001 • Support vendor reviews, customer security questionnaires, and control design • Evolve secure development practices, CI/CD security controls, and cloud security baselines • Establish AI security governance models • Identify systemic risks, recurring vulnerability patterns, and process inefficiencies • Contribute to long-term security strategy

🎯 Requirements

• Proven examples of owning penetration testing programs • Proven experience building vulnerability management systems • Proven experience implementing security automation • Proven experience helping organizations adopt modern technologies, including AI, securely and responsibly • Ability to develop a comprehensive view of external attack surface, vulnerabilities, and threat landscape • Experience with CrowdStrike, AWS, GCP, and application security tooling • Experience owning external penetration testing engagements end-to-end • Experience building and operationalizing vulnerability management programs • Experience with Drata evidence collection and control mapping workflows • Experience with continuous penetration testing, automation, and threat modeling • Experience owning and maturing bug bounty programs • Knowledge of OWASP Top 10 for LLMs / AI systems • Knowledge of ISO 42001 controls • Ability to define secure usage patterns for internal AI tools and third-party AI integrations • Experience with Python, APIs, and Make • Experience with AWS, GCP, GitHub, and SaaS platforms • Experience with Jira and Confluence workflows • Knowledge of ISO 27001, ISO 27701, and ISO 42001 • Experience with secure development practices, CI/CD security controls, and cloud security baselines • Ability to establish AI security governance models • Position can be based anywhere in the US • Ability to travel up to 15 days per year; senior management and leadership teams up to 35 days

🏖️ Benefits

• professional development • ISOs • health insurance • 401(k) matching • paid time off • comprehensive medical, dental, and vision coverage • flexible PTO • incentive stock options • volunteer time off • Employee Resource Groups • generous professional development program with dedicated annual time off for learning and growth • hands-on AI training and clear guardrails to experiment responsibly • Remote-first work arrangement • Mandatory all-company meetings several times a year • Required team travel as necessary

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume