Senior Security Analyst, Compliance

📋 Description

• Lead vulnerability management, pentesting, bug bounty, cloud/app security, audit readiness.
• Partner with Eng, DevOps, IT and Compliance to improve security and compliance.
• Proven experience owning pen testing programs and vulnerability management.
• Implement security automation and adopt modern technologies (including AI) securely.
• Be detail-oriented, collaborative, and build programs that reduce risk and enable safe innovation.

🎯 Requirements

• Penetration testing program ownership and end-to-end execution.
• Structured vulnerability management design and remediation prioritization.
• Bug bounty program design, governance, and researcher engagement.
• Experience with cloud security (AWS, GCP) and app security tooling.
• AI security governance; OWASP Top 10 for AI/LLMs; ISO 27001/27701/42001.
• Automation with Python, APIs, and tooling; threat intelligence pipelines.
• Strong cross-functional collaboration and audit readiness experience.

🎁 Benefits

• Remote-first company with periodic all-hands and travel.
• Health insurance and 401(k) with matching.
• ISO stock options and comprehensive benefits package.
• Professional development and paid time off.
• Open, inclusive workplace with equal opportunity employment.