Security Analyst, Sidetrade

• Basic understanding of CI/CD and how modern software is delivered (pipelines, build/test stages, deployments)
• Familiarity with Linux fundamentals (files, permissions, processes, logs) and basic networking concepts (DNS, HTTP/S, ports)
• Comfort using Git and collaborating through pull requests
• Interest in automation and “infrastructure as code” concepts
• Some exposure to Ansible (or another configuration management / automation tool) is a plus
• Some familiarity with CI tools like Jenkins is a plus (understanding jobs, pipelines, agents, credentials, etc.)
• Ability to troubleshoot systematically and improve reliability through automation and standardization
• Strong interest in cybersecurity with a desire to grow in operational security
• Basic understanding of common security concepts: vulnerability management, least privilege, hardening, secure configuration
• Awareness of application security topics is a plus (e.g., OWASP, SAST, dependency scanning)
• Ability to work with multiple teams (Security, DevOps, IT, Engineering) and communicate clearly
• Pragmatic approach: you can balance security requirements with operational constraints
• Willingness to document and standardize work (runbooks, procedures, FAQs)

Desirable

• Join the Operational Security team as a Security Analyst to help improve and run our security operations across development and production environments
• Your mission is to strengthen the day-to-day security foundations of our products and internal systems by maintaining security tooling, supporting secure CI/CD practices, and working closely with IT and DevOps teams to apply our security standards effectively
• Help configure, maintain, and troubleshoot security tools (e.g., SAST in CI/CD pipelines, vulnerability dashboards, scanners, reporting tools)
• Support rollouts, upgrades, and maintenance of security tooling and integrations
• Maintain documentation and operational runbooks for the toolstack
• Contribute to automation scripts and configuration management to support secure baselines (e.g., Ansible playbooks, shell/Python scripts)
• Assist in maintaining and improving hardening scripts and standard configurations for dev and production environments
• Help standardize operational tasks so security controls are repeatable and easy to deploy at scale
• Assist in integrating and maintaining SAST / security checks in CI/CD pipelines (including Jenkins)
• Help ensure findings are properly routed, visible, and actionable (e.g., dashboards, ticketing, notifications)
• Support teams in resolving pipeline-related issues related to security tooling and security gates
• Act as a bridge between Security and IT/DevOps teams on operational topics
• Assist with applying security standards in development and production environments
• Support investigations and analysis for operational security topics (e.g., tool alerts, misconfiguration, non-compliance to baseline standards)