Senior Security Analyst

The role

You will strengthen the security posture through vulnerability management, penetration testing, bug bounty operations, and cloud and application security. You will partner with Engineering, DevOps, IT, and Compliance to improve security processes and support AI security adoption.

What you will do

• Develop a view of the external attack surface, vulnerabilities, and threat landscape
• Own external penetration testing engagements end-to-end
• Build and operationalize a structured vulnerability management program
• Stand up scalable evidence collection and control mapping workflows in Drata
• Design and implement a continuous penetration testing program
• Own and mature the bug bounty program
• Lead implementation of AI security practices across internal systems and product development
• Develop automations and tooling using Python, APIs, and Make
• Provide technical support during audits for ISO 27001, ISO 27701, and ISO 42001
• Serve as a senior technical partner to Compliance for vendor reviews and customer questionnaires

Required qualifications

• Owned penetration testing programs
• Built vulnerability management systems
• Implemented security automation
• Helped organizations adopt modern technologies including AI securely and responsibly

Benefits

• comprehensive medical, dental, and vision coverage
• flexible PTO
• 401(k) matching
• incentive stock options
• volunteer time off
• Employee Resource Groups
• generous professional development program with dedicated annual time off for learning and growth

Before you apply

• All positions can be based anywhere in the US
• Requires up to 15 days of travel per year

About the company

OpenSesame is the trusted partner for Workforce Reinvention in the age of AI. They deliver integrated software, curated and customizable content, and expert services to help organizations expand their human+AI potential.