Loading...
SeniorFull-timeRustAWSGCPAzureKubernetesCI/CDAIAPI
Salary Range
$127,075 - $171,925 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
A Senior Security Analyst will be a member of the GRC team working within the Information Security organization and across the business to advise, build, and operate security and compliance programs at scale. This role is responsible for executing various components of Harness’ security posture and overseeing end-to-end solutions to complex problems.
Key Responsibilities
- →Contribute precise and actionable guidance to ensure security and privacy by design for engineering and business initiatives
- →Lead and deliver internal and external audits, risk assessments, and annual compliance certifications across the technical estate
- →Execute core security capabilities such as policy and procedure development, and security awareness and training requirements
- →Support customer trust initiatives such as reviewing contracts for security and privacy requirements, completing questionnaires and requests, and maintaining our customer trust portal
- →Continuously monitor and manage supply chain security and vendor risk management
- →Drive security and compliance across the business through empathetic partnership
- →Measure control and program effectiveness, recommending new strategies to manage risk
- →Articulate Harness’s security capabilities and controls to enterprise customers or auditors
- →Identify security gaps, develop or support the development of a path forward to address them, and ensure the plan is fully executed and working as intended
Requirements
- ✓At least 3-5 years of relevant industry experience
- ✓Exposure to industry regulations, frameworks, and compliance certifications (ISO 27001, SOC 2, PCI, NIST, FedRAMP, SOX, etc.)
- ✓Previous experience in a cloud-native environment (AWS, GCP, or Azure)
- ✓Previous experience assessing and utilizing AI in a secure environment
- ✓Exposure to or experience with Kubernetes, SBOMs, SLSA, and/or DLP
- ✓Previous experience with GRC tools or building automation
- ✓Strong cybersecurity acumen
- ✓Solid technical proficiency
- ✓Keen attention to detail
- ✓Comfortable handling the unknown, and can bring clarity to ambiguous situations
- ✓Proactive, results-driven, and an excellent collaborator and communicator
