Description
Operates Astrix for continuous discovery and risk scoring across SaaS and DevOps, triages OAuth and API-key risk, and drives owner assignment and remediation.
Responsibilities
- Operate Astrix Security for continuous discovery and risk assessment of Non-Human Identities (NHIs) across SaaS, cloud, APIs, and DevOps environments.
- Monitor and triage risks involving OAuth applications, API keys, service accounts, tokens, and machine identities.
- Analyze excessive privileges, stale/orphaned identities, risky integrations, and unauthorized access.
- Identify and assign appropriate owners for discovered NHIs.
- Drive remediation with IAM, Cloud Security, DevOps, Application Security, and Engineering teams.
- Track remediation through closure and maintain evidence for security governance and audits.
- Develop NHI security reports, metrics, and risk dashboards.
- Support least-privilege, credential rotation, OAuth governance, and NHI lifecycle management.
Required Skills
- Hands-on Astrix Security / NHI Security experience.
- Strong understanding of IAM, OAuth 2.0, API security, API keys, service accounts, and machine identities.
- Experience with Azure/AWS/Google Cloud Platform and SaaS/DevOps environments.
- Knowledge of least privilege, identity governance, and security risk remediation.
- Strong analytical, communication, and stakeholder-management skills.