Senior Security Analyst

Role overview A senior security analyst strengthens security operations and audit readiness across cloud infrastructure, applications, and internal systems. The work spans vulnerability management, penetration testing, bug bounty operations, and the development of security practices for AI systems, in close partnership with engineering, DevOps, IT, and compliance teams.

Responsibilities - Map the external attack surface and bring together threat and vulnerability signals from cloud environments and security tools. - Manage external penetration tests from vendor selection and scoping through remediation checks and executive reporting. - Build a vulnerability management program that helps technical teams prioritize and resolve risk. - Improve audit evidence collection, control mapping, and compliance visibility through workflow automation. - Develop continuous testing, bug bounty, and security automation practices, including checks across cloud, code, and SaaS environments. - Help teams apply secure design requirements to applications and AI systems, and support audits with clear technical evidence.

Requirements - Demonstrated experience owning penetration testing programs and building vulnerability management processes. - Practical expertise in cloud and application security, security automation, and audit readiness. - Ability to work across engineering, DevOps, IT, and compliance and turn technical risks into actionable plans. - Experience supporting security controls and audit requirements, including ISO 27001 and ISO 27701. - Ability to develop automation using Python, APIs, or workflow tools. - Strong written communication and the judgment to explain security findings to both technical and executive audiences.

Nice to have Experience with AWS, GCP, GitHub, Drata, CrowdStrike, Jira, and Confluence; bug bounty operations; OWASP guidance for AI and large language models; or ISO 42001. Familiarity with responsible adoption of AI tools is useful.

Benefits and work setup The role can be based anywhere in the United States and may require up to 15 travel days per year. Compensation is generally $130,000–$190,000 base, depending on experience. Benefits include medical, dental, and vision coverage, flexible paid time off, 401(k) matching, incentive stock options, volunteer time, employee resource groups, and professional development with dedicated learning time.