Description
Most companies claim to have the best people. We say to them, "Keep dreaming." Our people are second to none. They set us apart with their entrepreneurial spirit and ambition. They come to us from the likes of Amazon, Microsoft, Nordstrom, Starbucks and the sports world, bringing energy, bold ideas and a willingness to dive into the unfamiliar. It's our people that make BDA the top global Merchandise Agency to work for.
Location:
- This role is based in Woodinville, WA and requires you to work onsite 4 days per week, with 1 day remote.
- To be considered, you must live within commuting distance, as regular in-person collaboration is a key part of the role.
Job Summary
BDA is looking for a Senior Security Analyst who can help us strengthen our security program and move from a primarily reactive approach to a more proactive, planned security strategy.
This role will have a strong focus on application, cloud, and infrastructure security. You will identify vulnerabilities, test applications and environments, evaluate potential exploits, and work closely with IT and business partners to reduce risk across the organization.
You will also have the opportunity to help define what the red-team security function looks like at BDA. We are open to an experienced mid-level professional who has strong application security skills and is ready to continue growing, as well as a more seasoned security professional seeking broad ownership and meaningful challenges.
What You’ll Do
- Conduct vulnerability scans, penetration testing, and security assessments across applications, systems, cloud environments, and infrastructure.
- Use tools including Tenable Nessus, Burp Suite, and CrowdStrike to identify vulnerabilities, investigate threats, and recommend remediation.
- Test web applications to identify potential exploits, attack paths, and security weaknesses.
- Evaluate the security of Linux-based and cloud environments, including AWS, OCI, and Azure.
- Partner with infrastructure and engineering teams to improve system configurations, hardening standards, access controls, and overall security posture.
- Monitor security events, investigate potential incidents, and support incident response and forensic activities.
- Conduct account reviews, access reviews, risk assessments, and other security-related analysis.
- Develop clear reports and recommendations for technical teams, business leaders, and executive stakeholders.
- Help establish repeatable security processes, priorities, and testing practices that allow the organization to address risks proactively.
- Collaborate with security team members, consultants, IT infrastructure, engineering, legal, compliance, and business teams across BDA.
- Support the development and ongoing improvement of security policies, procedures, standards, and employee awareness initiatives.
- Stay current on emerging threats, vulnerabilities, attack methods, and security best practices.
Required Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Professional experience in information security, application security, infrastructure security, or a closely related area.
- Hands-on experience with all of the following: Microsoft Defender, Microsoft Purview, CrowdStrike, Tenable Nessus, and Burp Suite
- Proven experience with application and environment security, vulnerability testing, exploit testing, penetration testing, or vulnerability scanning.
- Strong understanding of cloud security and experience securing environments such as AWS, OCI, or Azure.
- Experience working with Linux environments and securing cloud-based or distributed infrastructure.
- Knowledge of security frameworks and standards such as NIST, CIS, or ISO 27001.
- Understanding of risk management practices and the ability to identify, prioritize, and communicate security risks.
- Working knowledge of security technologies such as firewalls, IDS/IPS, endpoint security, SIEM, and enterprise intrusion-prevention systems.
- Experience with system-hardening standards for servers, desktops, laptops, or network devices.
- Understanding of malware, attack vectors, network threats, incident response, authentication, and access-control technologies.
- Knowledge of internet protocols and security technologies, including HTTP, TLS, SSL, HTML, and XML.
Similar jobs
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
The Government Technology Agency (GovTech) is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (…
Est. 85,000 USD
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Est. 120,000 PLN
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 90,000 EUR
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 250,000 USD
About the Role: PubMatic is seeking a Director of Information Security to lead and evolve our global security program across enterprise infrastructure, cloud platforms, products, corporate systems, and emerging AI techno…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
Est. 124,000 USD
Anduril Industries is a defense technology company with a mission to transform U.S. and allied military capabilities with advanced technology. By bringing the expertise, technology, and business model of the 21st century…
Est. 840,000 SEK
About Keyfactor Our mission is to securely connect the world: humans, machines, and AI. Keyfactor is the leader in trust infrastructure for AI and machines, helping the world's largest enterprises and government agencies…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 140,000 USD
Black Duck Software, Inc. helps organizations build secure, high-quality software, minimizing risks while maximizing speed and productivity. Black Duck, a recognized pioneer in application security, provides SAST, SCA, a…
Est. 120,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
GovTech is the lead agency driving Singapore’s Smart Nation initiatives and public sector digital transformation. As the Centre of Excellence for Infocomm Technology and Smart Systems (ICT & SS), GovTech develops the…
Est. 120,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of Saving Lives with Data. Together, we power breakthrough med…
Est. 55,000 EUR
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 140,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Welcome to the future of cloud networking and security! Cato Networks is the first company to converge enterprise networking and security into one centralized and global service that is delivered by cloud. It is led by n…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Morristown, NJ / Austin, TX(hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a decad…
Est. 250,000 USD
Title: Chief Information Security Officer (CISO) Location: Austin, TX / Morristown, NJ (hybrid) Reports To: Chief Technology Officer About Hippo: Hippo was built on a promise: make homeownership effortless. Nearly a deca…
Senior IT Engineer – Network & Endpoint Infrastructure Truveta provides unprecedented real-world data and real-time intelligence, powered by a dataset built with and owned by US health systems united in a mission of…
About Agoda At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore…
GovTech supports various Government Agencies in carrying out ICT delivery services and appoints Agency Chief Information Security Officers (ACISO) to oversee information security management within these agencies. The ACI…
Est. 120,000 USD
SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this poss…
Est. 120,000 PLN
EBS is a rapidly expanding, entrepreneurial technology company and part of Alarm.com. Alarm.com is the leading cloud-based platform for smart security and the Internet of Things. More than 7.6+ million home and business…