Qualifications

• 5-7 years of experience in application security, DevSecOps, or related fields
• Proficient in GitHub Advanced Security (GHAS) and secrets management
• Strong understanding of API tokens, certificates, and privileged access management
• Experience with secure software development lifecycle (SDLC) practices
• Skilled in scripting and automation tools such as Python or PowerShell
• Excellent analytical and communication abilities
• Proven capacity to collaborate across multiple teams in a tech environment

Responsibilities

• Investigate and prioritize exposed credentials and sensitive secrets
• Drive remediation efforts alongside application teams for secure secret management
• Support implementation of GitHub Advanced Security features and enterprise security controls
• Document and maintain governance processes for secrets classification
• Enhance credential lifecycle management with IAM and platform teams
• Develop metrics and dashboards for monitoring secrets exposure and remediation
• Facilitate exception management and audit readiness for secrets controls
• Identify exposure patterns and improve preventive measures with engineering and AppSec teams
• Create training materials and best practices for secure secrets handling
• Explore automation to optimize detection and remediation processes
• Engage in incident response related to credential issues and software supply chain security

Benefits

• Opportunity to work with cutting-edge security tools and technologies
• Emphasis on collaboration with cross-functional teams
• Focus on a proactive security posture through education and training
• Engagement in continuous improvement of security policies and practices
• Access to professional growth and learning opportunities within a leading financial institution
• A dynamic work environment where innovation is encouraged
• Participation in incident response for real-world security challenges