[Hiring] Security Analyst @GuidePoint Security

Role Description

We are looking for a skilled Security Analyst, NHI to support the discovery, governance, and security of non-human identities — service accounts, application and machine identities, workload identities, secrets, tokens, and certificates — across enterprise, cloud, and DevOps environments. This role will engage in the development of NHI discovery and inventory, risk scoring and prioritization, and lifecycle and remediation programs while providing "Wow Them" service to clients and/or internal customers or co-workers.

The Security Analyst, NHI will be required to demonstrate strong identity security, cloud security, and secrets management skills, lead by influence, and strong business/financial acumen to drive the use of progressive non-human identity security and Zero Trust programs that will align the delivery business objectives and priorities.

Roles and Responsibilities

• Serve as a senior subject matter expert for Non-Human Identity (NHI) security.
• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes across enterprise environments.
• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities.
• Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles.
• Leverage modern NHI security platforms, preferably Oasis Security, Clutch Security, and Entro.
• Develop NHI risk scoring and prioritization models based on various factors.
• Analyze NHI relationships and dependencies across various environments.
• Identify and remediate credential sprawl, hardcoded secrets, and excessive privileges.
• Establish NHI ownership and accountability by collaborating with various teams.
• Develop and maintain NHI lifecycle processes.
• Integrate NHI security capabilities with enterprise platforms.
• Analyze authentication and activity data for suspicious behavior.
• Support implementation of least privilege and just-in-time access.
• Develop automation to improve NHI processes.
• Define and maintain NHI security standards and procedures.
• Conduct periodic NHI reviews and support various assessments.
• Develop dashboards and metrics to track NHI security posture.
• Collaborate with PAM and IAM teams for clear boundaries.
• Support NHI strategy, architecture, and implementation initiatives.
• Stay current on emerging NHI threats and technologies.
• Mentor junior analysts and contribute to NHI security documentation.

Qualifications

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related discipline.
• 2+ years of experience working with non-human identities and secrets management.
• Strong understanding of the Non-Human Identity security lifecycle.
• Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms.
• Strong understanding of AWS, Azure, and/or GCP identity and access management.
• Strong understanding of secrets management and credential security.
• Experience analyzing identity relationships and access paths.
• Strong analytical and problem-solving skills.
• Strong documentation and communication skills.
• Experience developing security controls, procedures, and dashboards.

Requirements

• Preferred experience with Oasis Security, Clutch Security, and Entro.
• Experience with cloud-native identity technologies.
• Familiarity with NHI attack paths and identity-based attack techniques.
• Experience with scripting and automation using Python, PowerShell, or similar technologies.
• Relevant certifications such as CISSP, CCSP, Security+, or IAM/PAM certifications.

Benefits

• Remote workforce primarily (U.S. based only, some travel may be required).
• Group Medical Insurance options with significant premium coverage.
• Group Dental Insurance with full premium coverage for employees.
• 12 corporate holidays and a Flexible Time Off (FTO) program.
• Healthy mobile phone and home internet allowance.
• Eligibility for retirement plan after 2 months at open enrollment.
• Pet Benefit Option.