Information Security Analyst

Peyton Resource Group; Town of Texas (WI); On-site; USD 120,000 - 150,000; Full time

Job summary

Peyton Resource Group is seeking an experienced security engineer to reduce developer friction by validating issues, prioritizing risks, and reducing false positives across the SDLC. You will configure and maintain GitLab security approval workflows, MR controls, and enforcement gates to streamline secure development.

The role involves enabling AI-assisted triage, remediation recommendations, and automated findings management.

Qualifications

• Experience with SAST, DAST, SCA, Container Security, and Secrets Detection tools.
• Experience configuring GitLab security controls, approval workflows, and policy-based enforcement.
• Experience integrating security platforms with GitLab, ServiceNow, Jira, and enterprise reporting solutions.
• Experience leveraging APIs, scripting, automation, and AI-enabled workflows to improve security operations.

Responsibilities

• Reduce developer friction through finding validation, risk-based prioritization, and false-positive reduction.
• Configure and maintain GitLab security approval workflows, Secure MR controls, approval policies, and enforcement gates.
• Support implementation of AI-assisted triage, remediation recommendations, and automated findings management.
• Build and maintain automation for finding enrichment, correlation, routing, deduplication, and reporting.
• Partner with development teams to improve remediation outcomes and adoption of AI-assisted security workflows.
• Support onboarding and operationalization of new AppSec tooling and capabilities.

Skills

SAST

DAST

SCA

Container Security

Secrets Detection

GitLab Security Controls

APIs & Automation

AI-enabled Workflows

Tools

GitLab

ServiceNow

Jira

Job description

• Reduce developer friction through finding validation, risk-based prioritization, and false-positive reduction.
• Configure and maintain GitLab security approval workflows, Secure MR controls, approval policies, and enforcement gates.
• Support implementation of AI-assisted triage, remediation recommendations, and automated findings management.
• Build and maintain automation for finding enrichment, correlation, routing, deduplication, and reporting.
• Partner with development teams to improve remediation outcomes and adoption of AI-assisted security workflows.
• Support onboarding and operationalization of new AppSec tooling and capabilities.

Desired Skills

1. Experience with SAST, DAST, SCA, Container Security, and Secrets Detection tools.

2. Experience configuring GitLab security controls, approval workflows, and policy-based enforcement.

3. Experience integrating security platforms with GitLab, ServiceNow, Jira, and enterprise reporting solutions.

4. Experience leveraging APIs, scripting, automation, and AI-enabled workflows to improve security operations.