Senior Security Analyst - AI & Cloud Security Lead

OpenSesame; Austin (TX); Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Professional development

ISOs

Health insurance

401(k) matching

Paid time off

Job summary

OpenSesame is seeking a Senior Security Analyst on the Compliance team to strengthen our security posture in a fast-growing environment. You will own vulnerability management, penetration testing, bug bounty operations, cloud and application security, and audit readiness.

You will partner across Engineering, DevOps, IT, and Compliance to embed security into workflows and support AI security initiatives while evolving our security program for scalable risk reduction.

Responsibilities

• Develop a comprehensive view of OpenSesame's external attack surface, vulnerabilities, and threat landscape — integrating signals from CrowdStrike, cloud environments (AWS, GCP), and application security tooling.
• Own external penetration testing engagements end-to-end — including vendor selection, scope design, execution oversight, remediation validation, and executive reporting.
• Build and operationalize a structured vulnerability management program — partnering with DevOps, Engineering, and IT to prioritize and remediate risk effectively.
• Stand up scalable evidence collection and control mapping workflows in Drata — improving audit readiness and reducing manual effort.
• Establish strong cross-functional relationships to embed security into engineering, infrastructure, and IT workflows from the outset.
• Design and implement a continuous penetration testing program that complements annual third-party testing — leveraging automation, threat modeling, and targeted validation.
• Own and mature the bug bounty program — improving signal quality, triage processes, researcher engagement, and remediation workflows.
• Lead implementation of AI security practices across internal systems and product development: Apply OWASP Top 10 for LLMs / AI systems to identify and mitigate emerging risks; Support adoption and operationalization of ISO 42001 controls; Define secure usage patterns for internal AI tools and third-party AI integrations.
• Partner with Product Engineering to define and enforce secure AI and application baseline requirements — ensuring security is built into system design, not retrofitted.
• Develop automations and tooling (Python, APIs, Make) to continuously collect threat intelligence, validate security baselines, and detect drift across AWS, GCP, GitHub, and SaaS platforms.
• Improve Jira and Confluence workflows to create visibility, accountability, and measurable progress across security findings and remediation.
• Provide deep technical support during audits — translating real-world implementations into clear, defensible narratives aligned with ISO 27001, ISO 27701, and ISO 42001.

Job description

OpenSesame is seeking a Senior Security Analyst on the Compliance team to strengthen our security posture in a fast-growing environment. You will own vulnerability management, penetration testing, bug bounty operations, cloud and application security, and audit readiness.

You will partner across Engineering, DevOps, IT, and Compliance to embed security into workflows and support AI security initiatives while evolving our security program for scalable risk reduction.