Remote opportunity at
GuidePoint SecuritySecurity Analyst, NHI (Non-Human Identity)
GuidePoint Security, a privately held value-added reseller focused on information security, is hiring a Security Analyst for its Non-Human Identity practice. The role is remote, and…
Career Tools
About This Role
GuidePoint Security, a privately held value-added reseller focused on information security, is hiring a Security Analyst for its Non-Human Identity practice. The role is remote, and the posting says the company's workforce is remote primarily and limited to U.S.-based staff. Travel of up to 10 percent may be required. The analyst helps discover, classify, govern and secure machine and workload identities, including service accounts, API identities, secrets, tokens and certificates…
Job Description
GuidePoint Security, a privately held value-added reseller focused on information security, is hiring a Security Analyst for its Non-Human Identity practice. The role is remote, and the posting says the company's workforce is remote primarily and limited to U.S.-based staff. Travel of up to 10 percent may be required.
The analyst helps discover, classify, govern and secure machine and workload identities, including service accounts, API identities, secrets, tokens and certificates that sit in enterprise systems, cloud platforms and DevOps pipelines. Work includes building discovery and inventory processes, creating risk scores that rank identities by privilege and potential blast radius, and running remediation programs for orphaned, stale or over-privileged credentials.
The job suits an experienced identity or cloud security professional who can act as a specialist, work with application owners and DevOps teams, and explain technical risk in business terms. The posting also covers linking non-human identity controls to identity, privileged access, cloud entitlement and posture tools, SIEM and DevSecOps stacks, and governing credentials used by AI agents. GuidePoint describes itself as having more than 1,300 employees and serving over 6,200 customers.
The posting notes that GuidePoint uses Greenhouse as its applicant tracking system and advises candidates to check their spam folder for updates.
Responsibilities
- Act as the go-to senior specialist for non-human identity security across machine, workload, API and service identities
- Build discovery, inventory, classification, ownership and lifecycle governance across enterprise environments
- Find unknown, orphaned, excessive, stale and high-risk identities through assessments
- Build NHI safeguards that follow zero-trust thinking, least-privilege access and secrets management
- Operate NHI tools such as Oasis, Clutch or Entro, with a preference for those platforms
- Create risk scoring models based on privilege, exposure, usage, ownership and business criticality
- Map identity relationships across applications, cloud, APIs, databases and CI/CD pipelines
- Remediate credential sprawl, hardcoded secrets and unnecessary privilege
- Work with application, DevOps, cloud and infrastructure owners to assign accountability
- Script automation covering discovery, rotating credentials, assigning owners and enforcing policy
- Build dashboards and metrics that show NHI posture
- Support audits, access certifications and periodic reviews
- Coach newer analysts and help write playbooks and reusable standards
Requirements
- Five-plus years across security fields such as IAM, PAM, cloud or application security
- Two-plus years handling NHIs, service accounts, machine identities or vaulted secrets
- Understanding of the NHI lifecycle from discovery through retirement
- Working knowledge of NHI types such as service principals, OAuth credentials, SSH keys, certificates and Kubernetes identities
- Hands-on experience with NHI, secrets management, PAM or IAM platforms
- Comfort with identity and access controls on AWS, Azure or GCP
- Familiarity with GitHub or GitLab, Jenkins, Terraform, Kubernetes and containers
- Grasp of zero-trust, least-privilege and layered-defense concepts
- Connecting identity tools to SIEM and SOAR products, ITSM, cloud posture and entitlement tools, and DevSecOps systems
- Clear documentation and the ability to turn technical NHI risk into business impact
Qualifications
- Exposure to Oasis, Clutch, Entro or similar NHI platforms
- Background with CyberArk, Delinea or BeyondTrust products
- Work with HashiCorp Vault or another enterprise secrets manager
- Understanding of OAuth 2.0, OIDC, SAML, JWTs, PKI and SSH
- Scripting with Python, PowerShell or REST APIs
- Familiarity with NHI attack paths and machine-to-machine authentication risk
- Experience building NHI risk models and executive reporting
- Certifications such as CISSP, CCSP or Security+
Core Skills
Benefits
- Group medical insurance with a zero-deductible PPO option or a high-deductible plan paired with an HSA
- Employer contributions toward medical premiums and HSA funding
- Primarily remote work for U.S.-based staff
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the role remote?
The posting says the workforce is primarily remote and limited to U.S.-based employees, and some positions may require travel.
How much travel is expected?
The posting says up to 10 percent travel.
What experience is needed?
The posting asks for five-plus years in a security discipline and two-plus years working with non-human identities or secrets management.
Does the posting list a salary?
No. The posting does not state a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
Search similar jobs
Related Jobs