Cybersecurity Analyst

We are looking for a Cybersecurity Analyst to support a focused application security effort centered on identifying, validating, and resolving exposed secrets and credentials within source code repositories. This role is based in Murray, Utah, and is offered as a Long-term Contract position. The person in this role will work closely with engineering and security partners to move findings from investigation through remediation and documented closure in a fast-paced, project-driven environment.

Responsibilities:
• Investigate security alerts related to exposed credentials and embedded secrets found in source code repositories, confirming validity and potential risk.
• Partner with software engineers, application owners, and security teams to assign ownership, define remediation steps, and drive issues through resolution.
• Use scripting and automation tools such as PowerShell, Bash, or Python to streamline analysis, tracking, and follow-up activities.
• Review repository history and code context in Git and GitHub to support remediation planning and verify corrective actions.
• Document findings, decisions, remediation progress, and final disposition in a clear and audit-ready manner.
• Coordinate with cross-functional stakeholders across a large engineering organization to maintain momentum on a backlog of security findings.
• Evaluate factors such as credential type, privilege level, environment, and exposure scope to help prioritize response actions.
• Validate that completed fixes fully address the identified issue and close findings with accurate reporting and supporting evidence.

Requirements

• Hands-on experience investigating and remediating hard-coded secrets, credentials, or similar security findings within source code repositories.
• Strong scripting ability in at least two of the following: PowerShell, Bash, and Python.
• Solid working knowledge of Git and GitHub, including collaboration with engineering teams on code-related remediation efforts.
• Ability to work independently while managing multiple tasks in a short-term, project-focused setting.
• Strong communication skills with the confidence to engage directly with internal engineering stakeholders.
• Experience documenting technical findings, remediation outcomes, and status updates with clarity and accuracy.
• Proven ability to collaborate effectively across multiple teams and adapt to different working styles and personalities.