Senior Security Analyst

OpenSesame

. Strengthen OpenSesame’s security posture as a Senior Security Analyst on the Compliance team .

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $130,000 - $190,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, penetration testing, and security automation, with a strong focus on AI security practices and compliance with ISO standards. Proven ability to collaborate across teams to enhance security processes and manage external security engagements effectively.

Highest-signal resume keywords

Vulnerability ManagementPenetration TestingSecurity AutomationAI Security PracticesISO Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability Management SystemsPenetration Testing ProgramsSecurity Automation ImplementationThreat ModelingOWASP Top 10 for LLMsSecure Development PracticesCI/CD Security ControlsCloud Security BaselinesEvidence Collection WorkflowsBug Bounty Programs

Tools & Technologies

CrowdStrikeAWSGCPDrataPythonAPIsMakeJiraConfluenceGitHub

Certifications & Qualifications

ISO 27001ISO 27701ISO 42001

Industry Keywords

Security PostureExternal Attack SurfaceThreat LandscapeCompliance EffortsAI Security Governance

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Strengthen OpenSesame’s security posture as a Senior Security Analyst on the Compliance team
Manage vulnerability management, penetration testing, bug bounty operations, cloud security, application security, and audit readiness
Partner with Engineering, DevOps, IT, and Compliance to improve security processes and support compliance efforts
Develop a comprehensive view of the external attack surface, vulnerabilities, and threat landscape
Own external penetration testing engagements, including vendor selection, scope design, execution oversight, remediation validation, and executive reporting
Build and operationalize a structured vulnerability management program
Establish evidence collection and control mapping workflows in Drata
Design and implement continuous penetration testing programs
Improve bug bounty signal quality, triage, researcher engagement, and remediation workflows
Lead implementation of AI security practices across internal systems and product development
Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks
Support adoption and operationalization of ISO 42001 controls
Define secure usage patterns for internal AI tools and third-party AI integrations
Define and enforce secure AI and application baseline requirements with Product Engineering
Develop security automations and tooling using Python, APIs, and Make
Continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms
Improve Jira and Confluence workflows for security findings and remediation
Provide technical support during audits aligned with ISO 27001, ISO 27701, and ISO 42001
Support vendor reviews, customer security questionnaires, and control design
Evolve secure development practices, CI/CD security controls, and cloud security baselines
Establish AI security governance models
Identify systemic risks, recurring vulnerability patterns, and process inefficiencies
Contribute to long-term security strategy

Requirements

What you’ll need

Proven examples of owning penetration testing programs
Proven experience building vulnerability management systems
Proven experience implementing security automation
Proven experience helping organizations adopt modern technologies, including AI, securely and responsibly
Ability to develop a comprehensive view of external attack surface, vulnerabilities, and threat landscape
Experience with CrowdStrike, AWS, GCP, and application security tooling
Experience owning external penetration testing engagements end-to-end
Experience building and operationalizing vulnerability management programs
Experience with Drata evidence collection and control mapping workflows
Experience with continuous penetration testing, automation, and threat modeling
Experience owning and maturing bug bounty programs
Knowledge of OWASP Top 10 for LLMs / AI systems
Knowledge of ISO 42001 controls
Ability to define secure usage patterns for internal AI tools and third-party AI integrations
Experience with Python, APIs, and Make
Experience with AWS, GCP, GitHub, and SaaS platforms
Experience with Jira and Confluence workflows
Knowledge of ISO 27001, ISO 27701, and ISO 42001
Experience with secure development practices, CI/CD security controls, and cloud security baselines
Ability to establish AI security governance models
Position can be based anywhere in the US
Ability to travel up to 15 days per year; senior management and leadership teams up to 35 days

Benefits

Comp & perks

professional development
ISOs
health insurance
401(k) matching
paid time off
comprehensive medical, dental, and vision coverage
flexible PTO
incentive stock options
volunteer time off
Employee Resource Groups
generous professional development program with dedicated annual time off for learning and growth
hands-on AI training and clear guardrails to experiment responsibly
Remote-first work arrangement
Mandatory all-company meetings several times a year
Required team travel as necessary