Security Analyst III

O2 Technologies, Inc. is seeking a Security Analyst III to support cybersecurity initiatives across application, cloud, AI, and software development environments. The role focuses on vulnerability management, secure software development, AI security, DevSecOps, compliance frameworks, and security tooling across major cloud platforms.

Responsibilities:

• Application Security
• AI Security
• Vulnerability Management
• Secure Software Development Lifecycle (SDLC)
• Software Composition Analysis (SCA)
• Software Bill of Materials (SBOM) Management
• AI Bill of Materials (AI-BOM) Management
• Package & Dependency Management
• Container Image Scanning
• CI/CD Pipeline Security
• Open-source Software Governance
• AI Red Teaming
• Generative AI Security
• Prompt Injection Mitigation
• Retrieval-Augmented Generation (RAG) Security
• NIST Cybersecurity Framework (CSF) Compliance
• NIST AI Risk Management Framework (AI RMF) Compliance
• NIST Secure Software Development Framework (SSDF) Compliance
• OWASP Application Security
• OWASP API Security
• OWASP AI & LLM Security Guidance

Requirements:

• • Application Security
• • AI Security
• • Vulnerability Management
• • Secure Software Development Lifecycle (SDLC)
• • Software Composition Analysis (SCA)
• • Software Bill of Materials (SBOM) Management
• • AI Bill of Materials (AI-BOM) Management
• • Package & Dependency Management
• • Container Image Scanning
• • CI/CD Pipeline Security
• • Open-source Software Governance
• • AI Red Teaming
• • Generative AI Security
• • Prompt Injection Mitigation
• • Retrieval-Augmented Generation (RAG) Security
• • NIST Cybersecurity Framework (CSF) Compliance
• • NIST AI Risk Management Framework (AI RMF) Compliance
• • NIST Secure Software Development Framework (SSDF) Compliance
• • OWASP Application Security
• • OWASP API Security
• • OWASP AI & LLM Security Guidance
• • Azure / Microsoft Azure
• • Azure DevOps
• • GitHub Enterprise / GitHub Copilot
• • Microsoft AI Services / Copilot Studio
• • Azure Databricks / MLflow
• • AWS / Amazon Web Services
• • Google Cloud Platform (GCP)
• • CI/CD Tools
• • Container Scanning Tools
• • SAST Tools
• • DAST Tools
• • SBOM Generation Tools
• • Artifact Repositories
• • Container Registries
• • Python
• Bachelor's Degree in Cybersecurity, Computer Science, Information Systems, Software Engineering, Computer Engineering, Electrical Engineering
• • Cybersecurity
• • Cloud Security
• • AI/ML Security
• • DevSecOps
• • Enterprise Software Development
• • AI Governance
• • SaaS Security
• Master's in Cybersecurity, Master's in Computer Science, Master's in Information Security, Master's in Software Engineering, PhD in Computer Science, PhD in Cybersecurity