Senior Security Analyst: AI & Compliance (Remote)

Partech; Portland (OR); Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Professional development

Job summary

OpenSesame in the United States is seeking a Senior Security Analyst to strengthen security posture in a fast-moving, high-growth environment. You will own vulnerability management, penetration testing programs, and audit readiness, partnering with Engineering, DevOps, IT, and Compliance to embed security into how we work, including AI security.

You will design scalable automation, apply OWASP Top 10 for LLMs, align with ISO controls, and lead bug bounty operations with cross-functional teams.

Qualifications

• Proven experience building and owning security programs across vulnerability management and penetration testing.
• Experience leading bug bounty operations and security automation initiatives.
• Strong background in cloud and application security, with audit readiness experience.

Responsibilities

• Own external and internal penetration testing programs end-to-end.
• Develop and operationalize vulnerability management and remediation workflows.
• Lead AI security practices and governance within product and internal systems.
• Enhance audit readiness with automated evidence collection and control mapping.
• Collaborate with Engineering, DevOps, IT, and Compliance to embed security in workflows.
• Improve Jira/Confluence workflows to track findings and remediation progress.

Skills

Vulnerability management

Penetration testing

Bug bounty programs

Cloud security

Application security

Audit readiness

Python scripting / automation

Tools

CrowdStrike

AWS

GCP

Drata

Jira

Confluence

GitHub

Job description

OpenSesame in the United States is seeking a Senior Security Analyst to strengthen security posture in a fast-moving, high-growth environment. You will own vulnerability management, penetration testing programs, and audit readiness, partnering with Engineering, DevOps, IT, and Compliance to embed security into how we work, including AI security.

You will design scalable automation, apply OWASP Top 10 for LLMs, align with ISO controls, and lead bug bounty operations with cross-functional teams.