Security Analyst, NHI (Non-Human Identity)

Role overview

Own the discovery, governance, and risk reduction of non-human identities across enterprise, cloud, and DevOps environments. You will help teams understand which service accounts, machine identities, credentials, and secrets exist, who owns them, and how to manage them securely throughout their lifecycle. The work combines hands-on assessment with program design and collaboration across security and engineering teams.

Responsibilities - Build processes for finding, inventorying, classifying, assigning ownership to, and managing non-human identities across cloud, on-premises, SaaS, and DevOps environments. - Assess identities and credentials for risks such as excessive access, stale or orphaned accounts, unmanaged secrets, and insecure authentication. - Create risk scoring and remediation priorities that consider permissions, exposure, usage, ownership, and business impact. - Apply least-privilege, Zero Trust, and secrets management principles to identity controls and remediation plans. - Work with application, infrastructure, cloud, DevOps, and security teams to reduce credential sprawl and improve accountability. - Use NHI security platforms to discover, monitor, analyze, and remediate machine and workload identities.

Requirements - Strong knowledge of identity and cloud security, secrets management, and non-human identity types such as service, application, workload, and API identities. - Ability to assess identity environments and develop practical governance, lifecycle, and remediation programs. - Understanding of least privilege and Zero Trust approaches to identity security. - Ability to work across technical teams, influence stakeholders, and align security initiatives with business priorities.

Nice to have - Experience with non-human identity security platforms, including Oasis Security, Clutch Security, or Entro. - Familiarity with integrations across IAM, PAM, CIEM, CSPM, SIEM, and DevSecOps tools. - Experience governing credentials and permissions for AI agents or other autonomous workloads. - Relevant security, cloud, or identity certifications.

Benefits and work setup - Primarily remote work for U.S.-based employees; travel may be required for some assignments. Travel for this role may be up to 10%. - Medical and dental plan options, paid holidays, flexible time off, phone and home internet allowances, retirement plan eligibility, and an optional pet benefit.