Senior Security Analyst (Governance and Trust)

United States - Remote · Remote · full time · Senior

$110,000 – $130,000

Listed on Redpoint Ventures Portfolio’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This role builds security assurance and compliance capabilities for a startup protecting open-source software, with an initial focus on federal certifications like FedRAMP and CMMC. It suits security practitioners who enjoy translating complex regulations into practical engineering solutions and can work across teams to identify and close security gaps.

Our summary, not Redpoint Ventures Portfolio’s wording. The full posting is on their site.

Skills this role names

What they ask for

Required

Strong foundation in information security from roles like security engineering, cloud security, product security, or security assurance
Technical fluency with modern cloud environments and SaaS architectures
Strong analytical and problem-solving skills for investigating unfamiliar topics
Sound security judgment to evaluate controls against actual risk
Ability to independently lead projects and navigate ambiguity
Clear written and verbal communication skills

Nice to have

Experience with NIST CSF, NIST SP 800-53, NIST SP 800-171, SOC 2, or ISO 27001
Exposure to U.S. public-sector security requirements including FedRAMP or CMMC
Experience with automated security validation or continuous control monitoring
Familiarity with cloud infrastructure, infrastructure-as-code, or CI/CD pipelines
Understanding of software supply chain security concepts like SBOMs or SLSA
Background in high-growth startups or security-focused technology companies