Security Analyst, NHI – Non-Human Identity

Job Description:

• Support the discovery, governance, and security of non-human identities across enterprise, cloud, and DevOps environments
• Serve as a senior subject matter expert for service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials
• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes
• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities
• Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles
• Use NHI security platforms to discover, analyze, monitor, and remediate non-human identities
• Develop NHI risk scoring and prioritization models
• Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms
• Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms
• Establish NHI ownership and accountability with application, development, infrastructure, DevOps, cloud engineering, and security teams
• Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement
• Integrate NHI security capabilities with IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms
• Analyze authentication and activity data for anomalous or suspicious non-human identity behavior
• Support least privilege and just-in-time access for workloads, applications, APIs, and machine identities
• Develop automation for NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement
• Define and maintain NHI security standards, procedures, control requirements, and operating processes
• Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments
• Develop dashboards and metrics tracking NHI security posture, inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance
• Collaborate with PAM and IAM teams on human, privileged, and non-human identity management boundaries and integration
• Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives
• Stay current on NHI threats, attack techniques, standards, and technologies
• Mentor junior analysts and contribute to NHI security playbooks, standards, and reusable analytical processes

Requirements:

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline
• 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management
• Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement
• Strong understanding of service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities
• Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms
• Experience discovering and analyzing NHIs across cloud, on-premises, SaaS, application, DevOps, and infrastructure environments
• Strong understanding of AWS, Azure, and/or GCP identity and access management
• Understanding of DevOps and CI/CD environments, including GitHub/GitLab, Jenkins, Terraform, Kubernetes, containers, and other automation platforms
• Strong understanding of secrets management and credential security, including vaulting, rotation, expiration, and detection of exposed or hardcoded credentials
• Experience analyzing identity relationships and access paths to identify excessive privilege, lateral movement opportunities, toxic combinations, and potential attack paths
• Strong understanding of Zero Trust, least privilege, identity security, and defense-in-depth principles
• Experience integrating security and identity platforms with SIEM, SOAR, ITSM, PAM, IAM, CSPM, CIEM, and DevSecOps tools
• Strong analytical and problem-solving skills
• Ability to work effectively with application owners, developers, DevOps engineers, cloud engineers, infrastructure teams, security architects, and risk/compliance teams
• Strong documentation and communication skills, including translating technical NHI risks into business and security impact
• Experience developing security controls, procedures, remediation plans, dashboards, and operational playbooks
• Ability to embrace emerging technologies, including AI tools
• Preferred experience with Oasis Security, Clutch Security, Entro, CyberArk, Delinea, BeyondTrust, HashiCorp Vault, OAuth 2.0, OpenID Connect, SAML, JWTs, API authentication, PKI, certificates, SSH, Python, PowerShell, and REST APIs
• Relevant certifications such as CISSP, CCSP, Security+, cloud security certifications, or IAM/PAM certifications are preferred
• Sedentary work and substantial wrist, hand, and/or finger movement for a minimum of 8 hours a day
• Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

Benefits:

• Remote workforce primarily (U.S. based only)
• Group Medical Insurance options: Zero Deductible PPO Plan with GuidePoint paying 90% of the employee premium and 70% of family premiums, or High Deductible Health Plan with HSA with GuidePoint paying 100% of employee premiums and 75% of family premiums
• HSA contribution of $850 annually for employees or $1,750 annually for families
• Group Dental Insurance with GuidePoint paying 100% of employee premiums and 75% of family premiums
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option
• Up to 10% travel may be required