Technical Analyst

System One; United States; Remote; USD 90,000 - 120,000; Part time

Job summary

System One is seeking a Technical Analyst for remote contract work in the United States. You will review and analyze findings from secret-scanning tools to identify credential risks and drive remediation with cross-functional teams.

You will support NHI governance, monitor rotation compliance, and help optimize discovery and remediation pipelines while delivering security metrics and dashboards for leadership.

Qualifications

• Bachelor's Degree in IT, Cybersecurity, or related field.
• Knowledge of IT policies, security procedures, and identity governance frameworks.
• Foundational security concepts: AAA, authentication fundamentals, Zero Trust.
• Experience with secret-scanning and automated discovery technologies, notably TruffleHog and Clutch.
• Familiarity with IAM concepts, incident response processes, and secure access management.

Responsibilities

• Discover, review, and analyze findings from secret-scanning and discovery platforms.
• Support Non-Human Identity (NHI) governance and lifecycle oversight.
• Monitor secret rotation compliance and assist teams with policy enforcement.
• Coordinate remediation of compromised credentials with application and system teams.
• Collaborate with security engineers to validate findings and assess policy changes.
• Track findings end-to-end and ensure timely resolution and ownership attribution.
• Improve scanning accuracy and optimization of discovery/remediation pipelines.
• Serve as liaison between IAM and business partners for secure credential usage.
• Prepare metrics and dashboards on exposed secrets and security posture trends.
• Maintain procedural documentation and automation runbooks.

Skills

IT policies & security procedures

Identity governance & IAM concepts

Zero Trust & authentication basics

Secret-scanning & discovery tooling (T

Security metrics & incident response

Clear communication of findings

Education

Bachelor's Degree in IT or Cybersecurity

Tools

TruffleHog

Clutch

CyberArk

Job description

Job Title: Technical Analyst

Type: Contract

Work Model: Remote -- offsite

Responsibilities

• Discover, review, validate, and analyze findings generated by secret-scanning and discovery platforms, including TruffleHog and Clutch, to identify exposed secrets, stale identities, and other credential-related security risks.
• Support Non-Human Identity (NHI) management, including governance, lifecycle oversight, and alignment of system/service accounts with enterprise security policies.
• Monitor and enforce secret rotation compliance, ensuring credentials are rotated according to policy and assisting teams in meeting regulatory and internal rotation requirements.
• Coordinate with application teams, business owners, system owners, and engineering partners to remediate compromised credentials and enforce secure rotation workflows.
• Collaborate with security engineers to validate findings, confirm ownership, and assess the impact of policy or process changes.
• Track findings end-to-end, ensuring timely resolution and accurate attribution of ownership.
• Assist in improving scanning accuracy and optimizing discovery and remediation pipelines in partnership with engineering teams.
• Serve as liaison between IAM and business partners to ensure cohesive remediation and secure credential usage practices.
• Prepare and deliver metrics and dashboards related to exposed secrets, mean-time-to-detect/remediate, repeat offenders, and security posture trends.
• Maintain procedural documentation and create automation runbooks.

Requirements

• Bachelor's Degree in Information Technology, Cybersecurity, or other related field, or the equivalent combination of education, training or experience
• Knowledge of IT policies, security procedures, and identity governance frameworks.
• Understanding of foundational security concepts (AAA, authentication fundamentals, Zero Trust).
• Experience with secret-scanning and automated discovery technologies, preferably including TruffleHog and Clutch, and familiarity with credential discovery and remediation workflow.
• Familiarity with IAM concepts, incident response processes, and secure access management for Enterprise Security Product & Services.

Desired Qualifications

• Experience generating security metrics, supporting risk mitigation, or assembling audit evidence.
• Exposure to Privileged Access Management (PAM) tools such as CyberArk.
• Ability to translate technical findings into clear, actionable business recommendations.
• Process improvement mindset with a focus on security, quality, and operational efficiency.
• Ability to serve as a trusted advisor to development, infrastructure, and business teams.
• Experience with secret management on the Multicloud (AWS, OCI, Azure).
• Experience with secret-scanning and discovery platforms, including TruffleHog and Clutch, to identify exposed secrets, stale identities, and other credential-related security risks.

System One, and its subsidiaries including Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.