Senior Security Consultant, NHI (Non-Human Identity)

GuidePoint Security is looking for a skilled Senior Security Consultant, NHI to support the discovery, governance, and security of non-human identities , service accounts, application and machine identities, workload identities, secrets, tokens, and certificates , across enterprise, cloud, and DevOps environments.

The Senior Security Consultant, NHI will engage in the development of NHI discovery and inventory, risk scoring and prioritization, and lifecycle and remediation programs while providing "Wow Them" service to clients and/or internal customers or co-workers.

Responsibilities:

• Serve as a senior subject matter expert for Non-Human Identity (NHI) security, including service accounts, application identities, machine identities, workload identities, API identities, secrets, tokens, certificates, and other machine-to-machine credentials.
• Develop and implement NHI discovery, inventory, classification, ownership, lifecycle management, and governance processes across enterprise environments.
• Conduct assessments to identify unknown, orphaned, excessive, over-privileged, stale, and high-risk non-human identities.
• Define and implement NHI security controls aligned with Zero Trust, least privilege, identity security, and secrets management principles.
• Leverage modern NHI security platforms, preferably Oasis Security, Clutch Security, and Entro, to discover, analyze, monitor, and remediate non-human identities.
• Develop NHI risk scoring and prioritization models based on privileges, exposure, usage, ownership, credential type, business criticality, and potential blast radius.
• Analyze NHI relationships and dependencies across applications, infrastructure, cloud environments, APIs, databases, DevOps pipelines, and third-party platforms.
• Identify and remediate credential sprawl, hardcoded secrets, excessive privileges, unused credentials, unmanaged identities, and insecure authentication mechanisms.
• Establish NHI ownership and accountability by working with application owners, development teams, infrastructure teams, DevOps, cloud engineering, and security teams.
• Develop and maintain NHI lifecycle processes covering creation, onboarding, authentication, authorization, rotation, monitoring, certification, suspension, and retirement.
• Integrate NHI security capabilities with enterprise IAM, PAM, CIEM, CSPM, SIEM, ITSM, secrets management, and DevSecOps platforms.
• Analyze authentication and activity data to identify anomalous or suspicious behavior involving non-human identities.
• Support implementation of least privilege and just-in-time access for workloads, applications, APIs, and machine identities.
• Develop automation to improve NHI discovery, remediation, credential rotation, ownership assignment, and policy enforcement.
• Define and maintain NHI security standards, procedures, control requirements, and operating processes.
• Conduct periodic NHI reviews and support access certification, audit, compliance, and risk assessments.
• Develop dashboards and metrics to track NHI security posture, including inventory coverage, ownership, risk, privilege levels, credential age, remediation status, and policy compliance.
• Collaborate with PAM and IAM teams to establish clear boundaries and integration between human identity, privileged identity, and non-human identity management.
• Support NHI strategy, architecture, proof-of-concepts, technology evaluations, and implementation initiatives.
• Stay current on emerging NHI threats, attack techniques, industry standards, and technologies related to machine identities, workload identities, secrets, APIs, and AI agents.
• Mentor junior analysts and contribute to the development of NHI security playbooks, standards, and reusable analytical processes.

Requirements:

• 5+ years of experience in cybersecurity, IAM, PAM, cloud security, application security, or a related security discipline.
• 2+ years of experience working with non-human identities, service accounts, application identities, machine identities, workload identities, or secrets management.
• Strong understanding of the Non-Human Identity security lifecycle, including discovery, classification, ownership, risk assessment, governance, monitoring, remediation, and retirement.
• Strong understanding of different NHI types, including service and application accounts, workload and machine identities, API identities and API keys, service principals, access tokens and OAuth credentials, SSH keys, certificates, secrets and credentials, CI/CD identities, cloud workload identities, containers and Kubernetes identities, and robotic/process automation identities.
• Hands-on experience with NHI security, secrets management, PAM, IAM, or identity security platforms.
• Preferred experience with Oasis Security, Clutch Security, and Entro or comparable NHI security platforms.

Benefits:

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family))