Security Analyst III

O2 Technologies,Inc; Clifton Heights (Delaware County); On-site; USD 90,000 - 120,000; Full time

Job summary

O2 Technologies,Inc is seeking an experienced security engineer to lead secure software development, SBOM/AI-BOM governance and vulnerability management across cloud and SaaS environments.

Responsibilities include strengthening AI security, conducting open-source governance, and ensuring compliance with CSF/SSDF, OWASP guidance, and container scanning. A strong background in cloud security and DevSecOps is required.

Qualifications

• Experience in secure software development and governance practices.
• Proficiency with cloud platforms and DevSecOps tooling.
• Strong understanding of SBOM and AI risk management.

Responsibilities

• Lead secure SDLC processes and SBOM/AI-BOM governance.
• Implement vulnerability management across cloud and SaaS apps.
• Ensure compliance with CSF, SSDF and OWASP guidance.
• oversee container scanning, SCA and dependency management.
• Advance AI security, red-team activities and prompt-injection mitigations.

Skills

Application Security

AI Security

Vulnerability Management

SDLC

SCA

SBOM Management

AI-BOM Management

Package & Dependency Management

Container Image Scanning

CI/CD Security

Open-source Governance

AI Red Teaming

Generative AI Security

Prompt Injection Mitigation

RAG Security

CSF Compliance

SSDF Compliance

OWASP App Security

OWASP API Security

OWASP AI & LLM Security Guidance

Education

Bachelor's Degree in Cybersecurity

Master's Degree in Cybersecurity or CS

PhD in CS or Cybersecurity

Tools

Azure

Azure DevOps

GitHub Enterprise

Copilot Studio

Azure Databricks

MLflow

AWS

GCP

CI/CD Tools

Container Scanning Tools

SAST Tools

DAST Tools

SBOM Generation Tools

Artifact Repositories

Container Registries

Python

Job description

• Secure Software Development Lifecycle (SDLC)
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBOM) Management
• AI Bill of Materials (AI-BOM) Management
• Container Image Scanning
• Open-source Software Governance
• AI Red Teaming
• Generative AI Security
• Retrieval-Augmented Generation (RAG) Security
• NIST Cybersecurity Framework (CSF) Compliance
• NIST Secure Software Development Framework (SSDF) Compliance
• OWASP Application Security
• OWASP API Security
• OWASP AI & LLM Security Guidance

Key Responsibilities & Skills

• Application Security
• AI Security
• Vulnerability Management
• Secure Software Development Lifecycle (SDLC)
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBOM) Management
• AI Bill of Materials (AI-BOM) Management
• Package & Dependency Management
• Container Image Scanning
• CI/CD Pipeline Security
• Open-source Software Governance
• AI Red Teaming
• Generative AI Security
• Prompt Injection Mitigation
• Retrieval-Augmented Generation (RAG) Security
• NIST Cybersecurity Framework (CSF) Compliance
• NIST AI Risk Management Framework (AI RMF) Compliance
• NIST Secure Software Development Framework (SSDF) Compliance
• OWASP Application Security
• OWASP API Security
• OWASP AI & LLM Security Guidance

Technical Skills

• Azure / Microsoft Azure
• Azure DevOps
• GitHub Enterprise / GitHub Copilot
• Microsoft AI Services / Copilot Studio
• Azure Databricks / MLflow
• AWS / Amazon Web Services
• Google Cloud Platform (GCP)
• CI/CD Tools
• Container Scanning Tools
• SAST Tools
• DAST Tools
• SBOM Generation Tools
• Artifact Repositories
• Container Registries
• Python

Education

Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Computer Engineering, Electrical Engineering. Preferred: Master's in Cybersecurity, Master's in Computer Science, Master's in Information Security, Master's in Software Engineering, PhD in Computer Science, PhD in Cybersecurity.

Industry Experience

• Cybersecurity
• Cloud Security
• Application Security
• AI/ML Security
• DevSecOps
• Enterprise Software Development
• AI Governance
• SaaS Security