Senior Security Analyst: AI & Cloud Security Lead

opensesame; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

OpenSesame is seeking a Senior Security Analyst to strengthen its security posture in a fast-growing environment. You will own penetration testing programs, build vulnerability management systems, and drive security automation across cloud, AI, and applications.

You will partner with Engineering, DevOps, IT, and Compliance to embed security into every stage of development and operations, supporting audit readiness and risk reduction.

Qualifications

• Deep technical security expertise.
• Experience leading penetration testing programs.
• Ability to build vulnerability management systems and automation.

Responsibilities

• Develop a comprehensive view of the external attack surface, vulnerabilities, and threat landscape.
• Own external penetration testing engagements end-to-end, including scope and remediation validation.
• Build and operate a structured vulnerability management program with DevOps, Engineering, and IT.
• Stand up scalable evidence collection and control-mapping workflows in Drata for audit readiness.
• Embed security into engineering, infrastructure, and IT workflows from the outset.
• Design and implement a continuous penetration testing program leveraging automation and threat modeling.
• Lead the bug bounty program, improving signal quality and remediation workflows.
• Drive AI security practices across internal systems and product development, including ISO-related controls.
• Develop automations to collect threat intelligence and detect drift across cloud and SaaS platforms.
• Improve Jira/Confluence workflows to create visibility and accountability for findings.

Skills

Penetration testing

Vulnerability management

Security automation

Cloud security

Application security

Audit readiness

AI security

Cross-functional collaboration

Job description

OpenSesame is seeking a Senior Security Analyst to strengthen its security posture in a fast-growing environment. You will own penetration testing programs, build vulnerability management systems, and drive security automation across cloud, AI, and applications.

You will partner with Engineering, DevOps, IT, and Compliance to embed security into every stage of development and operations, supporting audit readiness and risk reduction.