AI Security Analyst

About the role

We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense’s environment.

Key responsibilities

• Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API‑level agents, classify findings by risk tier and escalate for containment.
• Investigate alerts related to autonomous agents and AI‑powered workflows, document findings and drive remediation with Automation Engineer and Identity teams.
• Monitor DLP and AI usage logs for signs of sensitive data exfiltration through AI tools, tune detection rules and validate controls.
• Govern developer‑facing AI tools such as GitHub Copilot and Claude Code for policy compliance and credential exposure.
• Maintain AI activity logging, data retention and audit evidence for ISO 42001, EU AI Act readiness and internal assessments.

Required profile

• 3‑5+ years in security analysis, SOC or GRC roles.
• Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling.
• Understanding of AI/LLM risk concepts including prompt injection, data exfiltration and shadow AI.
• Familiarity with non‑human identity (service accounts, API keys, OAuth tokens) and related security challenges.
• Experience with threat detection frameworks such as MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 is a plus.
• Proficiency in scripting or query languages (Python, SQL, SPL or KQL) for investigation and reporting.
• Strong written documentation habits and ability to translate technical findings into risk‑based narratives.
• Experience with cloud environments (AWS, Azure or GCP).

Required skills

• Splunk
• Microsoft Sentinel
• Google Chronicle
• Python
• SQL
• SPL / KQL
• AWS
• Azure
• GCP
• MITRE ATT&CK
• CASB tools (e.g., Netskope, Zscaler, Wiz)
• DLP solutions

Nice to have

• Hands‑on exposure to AI governance frameworks such as ISO 42001, NIST AI RMF or EU AI Act.
• Experience with AI‑aware security platforms (Orca Security, Microsoft Purview, Abnormal Security, Bolster AI).
• Knowledge of ML‑based anomaly detection or NLP‑driven log analysis.
• Security certifications (Security+, CISSP, GIAC, AI‑specific credentials).