We are looking for a Cybersecurity Analyst to support a focused application security effort centered on identifying, validating, and resolving exposed secrets and credentials within source code repositories. This role is based in Murray, Utah, and is offered as a Long-term Contract position. The person in this role will work closely with engineering and security partners to move findings from investigation through remediation and documented closure in a fast-paced, project-driven environment.
Responsibilities:
- Investigate security alerts related to exposed credentials and embedded secrets found in source code repositories, confirming validity and potential risk.
- Partner with software engineers, application owners, and security teams to assign ownership, define remediation steps, and drive issues through resolution.
- Use scripting and automation tools such as PowerShell, Bash, or Python to streamline analysis, tracking, and follow-up activities.
- Review repository history and code context in Git and GitHub to support remediation planning and verify corrective actions.
- Document findings, decisions, remediation progress, and final disposition in a clear and audit-ready manner.
- Coordinate with cross-functional stakeholders across a large engineering organization to maintain momentum on a backlog of security findings.
- Evaluate factors such as credential type, privilege level, environment, and exposure scope to help prioritize response actions.
- Validate that completed fixes fully address the identified issue and close findings with accurate reporting and supporting evidence.
- Hands-on experience investigating and remediating hard-coded secrets, credentials, or similar security findings within source code repositories.
- Strong scripting ability in at least two of the following: PowerShell, Bash, and Python.
- Solid working knowledge of Git and GitHub, including collaboration with engineering teams on code-related remediation efforts.
- Ability to work independently while managing multiple tasks in a short-term, project-focused setting.
- Strong communication skills with the confidence to engage directly with internal engineering stakeholders.
- Experience documenting technical findings, remediation outcomes, and status updates with clarity and accuracy.
- Proven ability to collaborate effectively across multiple teams and adapt to different working styles and personalities.