Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 5 days ago

XTN-3E78732 | SECURITY ANALYST – PRODUCT & VENDOR

KMC Solutions Inc1,596 open roles

Where
Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowXTN-3E78732 | SECURITY ANALYST – PRODUCT & VENDORKMC Solutions Inc · Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on KMC Solutions Inc's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. KMC Solutions Inc postings stay open a median of 1 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: first seen 5 days ago

KMC Solutions Inc median: 1 days open

The posting

We are seeking a Security Analyst to support the organization’s Third-Party Risk Management (TPRM) program, with a primary focus on application and security architecture reviews of external vendors and SaaS providers.

This role sits at the intersection of security architecture, vendor assessment, and GRC reporting. The analyst will evaluate vendor-provided documentation, analyze cloud-based technology stacks, and produce structured security assessment outputs that feed directly into the GRC team’s formal risk reporting process.

A key part of this role involves working with incomplete or unclear vendor documentation and performing independent research (including OSINT techniques) to accurately understand vendor architectures and security posture.

  • Health Insurance/HMO
  • Enjoy unlimited MadMax Coffee
  • Diverse learning & growth opportunities
  • Accessible Cloud HR platform (Sprout)
  • Above standard leaves

Key Responsibilities

  • Perform detailed security architecture and application reviews of third-party vendors, SaaS platforms, and external services.
  • Request and evaluate vendor documentation such as:

Architecture diagrams

  • Security practices and policies
  • Compliance reports (SOC 2, ISO 27001, etc.)
  • Penetration test summaries
  • Data flow and integration diagrams
  • Use a standardized internal assessment framework to evaluate expected controls and determine vendor risk levels.
  • Translate technical findings into a structured document used by the GRC team for formal risk reporting.
  • Conduct independent research and OSINT analysis when vendor documentation is incomplete or missing.
  • Assess a wide variety of modern and niche cloud-based technology stacks.
  • Communicate directly with vendors to clarify architecture, controls, and security posture.
  • Collaborate primarily with GRC and occasionally with Procurement and Engineering during vendor evaluations.
  • Manage multiple concurrent vendor assessments with minimal supervision.

Required Skills & Experience

  • 3+ years’ experience in any of the following:
  • Security analysis
  • Security architecture review
  • Application security
  • Third-party/vendor risk management
  • Cloud security assessment

Strong ability to interpret:

  • Architecture diagrams
  • Security documentation
  • Data flows and system integrations
  • Familiarity with cloud-based and SaaS technology stacks.
  • Experience evaluating vendor security posture against defined security control requirements.
  • Strong analytical, research, and documentation skills.
  • Comfortable working with ambiguous or incomplete information.
  • Self-motivated and able to work independently across multiple assessments.

Highly Preferred

  • Experience in Third-Party Risk Management (TPRM) or Supply Chain Risk Management.
  • Experience performing security reviews for SaaS or cloud vendors.
  • Familiarity with OSINT techniques for technology and architecture research.
  • Exposure to GRC processes and risk reporting.

Key Traits for Success

  • Naturally curious and investigative mindset.
  • Comfortable navigating unfamiliar technologies and niche stacks.
  • Detail-oriented with strong written communication skills.
  • Able to translate technical architecture into risk language for GRC reporting.
  • Proactive, independent, and highly organized.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against KMC Solutions Inc's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on KMC Solutions Inc's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    KMC Solutions Inc's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.