AppSec - Secrets Management Specialist
Core
Investigate, validate, and triage exposed credentials, API keys, tokens, and certificates; partner with engineering to drive remediation and secure replacement of secrets.
Role type
AppSec Secrets Management Specialist
Builds
Secure secrets handling practices, detection patterns, and remediation workflows within the SDLC
Domain
Financial Services / Application Security / Secrets Management
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
secrets management, credential lifecycle management, risk-based prioritization, incident response, SDLC security, automation scripting, dashboarding, governance process design
Preferred skills
GitHub Advanced Security (GHAS), CI/CD platform familiarity, cloud credential management, software supply chain security, Python/PowerShell/JavaScript scripting
Technologies
GitHub Advanced Security (GHAS), CI/CD platforms, Python, PowerShell, JavaScript
Responsibilities
Investigate and triage exposed secrets; partner with app teams for remediation; implement GHAS controls; define secrets classification standards; collaborate on IAM and vault adoption; develop metrics and reporting; support exception management and audit readiness; create developer guidance and training; identify automation opportunities; participate in incident response.
Seniority
Mid-level, hands-on IC
