AI Security Analyst, 8am

• 3–7 years of experience in information security, security operations, application security, or related fields
• Working knowledge of:
• Familiarity with AI concepts, architectures, and common risks (e.g., OWASP Top 10 for LLMs)
• Experience supporting compliance/audit activities (SOC 2, PCI, HIPAA, ISO)
• Strong communication skills and ability to collaborate in a fast-paced SaaS environment
• Demonstrated experience leveraging AI tools and technologies to improve workflows, enhance decision-making, or drive innovation

Desirable

• The AI Security Analyst is a hybrid role combining security operations monitoring with AI-specific risk management and compliance support
• This position focuses on identifying, assessing, and mitigating risks associated with AI use (particularly generative AI and LLMs) across internal tools and customer-facing platforms, including prompt injection, data exposure, and model misuse, while contributing to traditional security monitoring
• The role does not involve building or training AI models but secures how AI is deployed, governed, monitored, and used within the organization
• Identify and mitigate key AI-specific threats, including:
• Prompt injection, jailbreaking, and adversarial inputs
• Sensitive information disclosure (e.g., data leakage via inputs/outputs)
• Insecure output handling and excessive agency
• Model misuse, abuse, or overreliance
• Supply chain vulnerabilities in third-party AI services/models
• Inference-side attacks and exfiltration risks
• Partner with Engineering, Product, Legal, and Privacy teams to review AI use cases, conduct risk assessments, and recommend controls before production deployment
• Evaluate third-party AI vendors and services for security posture
• Develop, implement, and enforce technical and policy-based guardrails (e.g., input/output filtering, usage policies) for responsible AI adoption
• Support AI-related incident response, investigation, and post-incident analysis
• Perform SOC-style monitoring, alert triage, and investigation across cloud, application, and AI-enabled systems (including AI API usage and data flows)
• Enhance detection rules and logging for AI-specific activity
• Contribute to threat modeling, particularly for AI integrations
• Support audit readiness and compliance with:
• SOC 2, PCI DSS, HIPAA (as applicable), ISO standards
• Emerging AI frameworks (e.g., NIST AI RMF, ISO 42001, OWASP Top 10 for LLMs)
• Document AI security controls, risk assessments, and evidence for audits
• Collaborate with Privacy and Compliance teams to align AI usage with data protection obligations
• Monitor evolving AI regulations and translate them into actionable controls
• Serve as the go-to security advisor on AI initiatives, acting as an enabler of innovation
• Educate stakeholders on AI risks, best practices, and secure usage patterns