Security Analyst, NHI – Non-Human Identity

GuidePoint Security

. Support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments .

Posted 10/12/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Non-Human Identity (NHI) security lifecycle management, including discovery, governance, and risk assessment, while effectively collaborating with cross-functional teams to implement security controls aligned with Zero Trust principles.

Highest-signal resume keywords

Non-Human Identity Security Lifecycle ManagementSecrets ManagementIdentity Access Management (IAM)Privileged Access Management (PAM)Cloud Security (AWS, Azure, GCP)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

NHI DiscoveryRisk AssessmentCredential SecurityAPI AuthenticationAutomation DevelopmentIdentity Relationship AnalysisSecurity Control DevelopmentMonitoring and RemediationGovernance ProcessesData Analysis

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsCollaboration SkillsMentoring Skills

Tools & Technologies

HashiCorp VaultCyberArkDelineaBeyondTrustOAuth 2.0OpenID ConnectSAMLKubernetesTerraformGitHub/GitLab

Certifications & Qualifications

CISSPCCSPSecurity+Cloud Security CertificationsIAM/PAM Certifications

Industry Keywords

Zero TrustLeast PrivilegeDevSecOpsCI/CDCloud Workload Identities

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformITSMJenkinsKubernetesPythonTerraformVault

About the role

Key responsibilities & impact

Support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments
Serve as a senior subject matter expert for service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials
Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes
Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities
Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles
Use NHI security platforms to discover, analyze, monitor, and remediate non-human identities
Develop NHI risk scoring and prioritization models
Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms
Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms
Establish NHI ownership and accountability with application, development, infrastructure, DevOps, cloud engineering, and security teams
Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement
Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms
Analyze authentication and activity data for anomalous or suspicious non-human identity behavior
Support least privilege and just-in-time access for workloads, applications, APIs, and machine identities
Develop automation for NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement
Define and maintain NHI security standards, procedures, control requirements, and operating processes
Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments
Develop dashboards and metrics tracking NHI security posture, inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance
Collaborate with PAM and IAM teams on human, privileged, and non-human identity management boundaries and integration
Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives
Stay current on NHI threats, attack techniques, standards, and technologies
Mentor junior analysts and contribute to NHI security playbooks, standards, and reusable analytical processes

Requirements

What you’ll need

5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline
2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management
Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement
Strong understanding of service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities
Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms
Experience discovering and analyzing NHIs across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments
Strong understanding of AWS, Azure, and/or GCP identity and access management
Understanding of DevOps and CI/CD environments, including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and other automation platforms
Strong understanding of secrets management and credential security, including vaulting, rotation, expiration, and detection of exposed or hardcoded credentials
Experience analyzing identity relationships and access paths to identify excessive privilege, lateral movement opportunities, toxic combinations, and potential attack paths
Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles
Experience integrating security and identity platforms with SIEM, SOAR, ITSM, PAM, IAM, CSPM, CIEM, and DevSecOps tools
Strong analytical and problem-solving skills
Ability to work effectively with application owners, developers, DevOps engineers, cloud engineers, infrastructure teams, security architects, and risk/compliance teams
Strong documentation and communication skills, including translating technical NHI risks into business and security impact
Experience developing security controls, procedures, remediation plans, dashboards, and operational playbooks
Ability to embrace emerging technologies, including AI tools
Preferred experience with Oasis Security, Clutch Security, Entro, CyberArk, Delinea, BeyondTrust, HashiCorp Vault, OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, SSH, Python, PowerShell, and REST APIs
Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or IAM/PAM certifications are preferred
Sedentary work and substantial wrist, hand, and/or finger movement for a minimum of 8 hours a day
Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

Benefits

Comp & perks

Remote workforce primarily (U.S. based only)
Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums
HSA contribution of $850 annually for employees or $1,750 annually for families
Group Dental Insurance with GuidePoint paying 100% of employee premiums and 75% of family premiums
12 corporate holidays
Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
Up to 10% travel may be required