The Senior Analyst – Secrets Management is responsible for managing and securing sensitive information, credentials, and secrets across the organization. This role ensures proper lifecycle management, access control, and administration of secrets management tools to maintain robust security practices.
Key Responsibilities:
- Manage the full lifecycle of secrets, including creation, rotation, revocation, and archival
- Administer and maintain secrets management tools and platforms (e.g., HashiCorp Vault, CyberArk, AWS Secrets Manager)
- Implement access control policies and enforce least-privilege principles for secrets usage
- Monitor secrets usage and access patterns to detect potential risks or anomalies
- Collaborate with security, DevOps, and application teams to integrate secrets management into workflows
- Conduct periodic audits and reviews of secrets and credentials to ensure compliance with security policies
- Provide guidance and best practices for secure storage and management of sensitive data
- - Required Experience & Skills:
- 7+ years of experience in security engineering, cloud security, or related fields
- Strong understanding of secrets management, encryption, and secure credential handling
- Hands-on experience with secrets management tools and platforms
- Knowledge of identity and access management (IAM) and security best practices
- Excellent problem-solving skills and attention to detail
- Strong collaboration and communication skills to work with cross-functional teams
Preferred (Nice to Have):
- Experience with DevSecOps practices and integrating secrets management into CI/CD pipelines
- Familiarity with regulatory compliance requirements related to data security
- Security certifications such as CISSP, CISM, or equivalent