Security Risk Analyst Risk Engineering

Skills

About the Role

You will assess security risks, turn ambiguous questions into documented decisions, and communicate trade-offs to leadership. You will perform qualitative and FAIR-based quantitative analysis, work with Security Engineering on threat scenarios and controls, scale analysis with AI and automation, and create reusable risk-management methods.

Requirements

• End-to-end experience with qualitative and quantitative security or technology risk analysis
• Hands-on FAIR-style quantification experience
• Experience with scenario decomposition, calibrated estimation, and Monte Carlo simulation
• Ability to frame ambiguous questions and drive decisions
• Technical security knowledge sufficient to decompose attack paths with security engineers
• Ability to communicate complex risk trade-offs to decision makers
• Experience using Claude or other LLMs as daily working tools

Responsibilities

• Enable risk-informed decisions for leadership and partner teams
• Lead quantitative analysis of security risk scenarios using FAIR, calibrated estimation, and simulation
• Assess threat scenarios and control effectiveness with Security Engineering
• Recommend risk treatment decisions and define re-evaluation triggers
• Shape leadership risk reviews, risk appetite, and risk metrics
• Use AI and automation to scale risk analysis
• Own calibration and quality review of risk-analysis outputs
• Create reusable risk-analysis methods, templates, and training

Benefits

• Optional equity donation matching
• Generous vacation
• Parental leave
• Flexible working hours