AI Security Analyst

Accountabilities:: Monitor enterprise AI usage across CASB, SWG, OAuth, endpoint, DLP, and other security telemetry to identify unauthorised AI applications, browser extensions, and API-based agents. Classify AI security findings according to risk and escalate unauthorised or potentially harmful deployments for investigation and containment. Investigate alerts involving autonomous agents and AI-powered workflows, including anomalous tool chains, unexpected data access, credential misuse, and emerging agent-based attack patterns. Document investigation findings and coordinate remediation with automation, identity, security operations, and engineering teams. Monitor AI usage and DLP logs for potential sensitive-data exfiltration through prompts, uploads, plugins, connectors, and other AI interfaces. Tune and validate AI-specific DLP and detection controls to ensure they operate effectively and identify relevant security risks. Monitor developer-facing AI tools for policy compliance, credential exposure, non-human identity risks, and other security concerns. Partner with engineering teams to establish and maintain appropriate security guardrails for code-assistance and agentic development tools. Maintain and validate AI activity logging, retention, and audit controls to ensure sufficient visibility and traceability. Collect, organise, and maintain evidence supporting AI security audits, ISO 42001 certification activities, AI impact assessments, and regulatory readiness initiatives. Analyse false-positive and false-negative trends and recommend improvements to detection thresholds, rules, and investigation logic. Identify recurring security patterns and contribute them to automation and security-response playbooks. Collaborate with Security Operations, Identity, Legal, AI/ML Engineering, and governance stakeholders to align findings with incident response and risk-management processes. Translate technical security findings into clear, risk-based narratives for governance forums, leadership, and executive reporting. Requirements: 3–5+ years of experience in security analysis, SOC, GRC, or a closely related cybersecurity role. Working knowledge of SIEM platforms such as Splunk, Microsoft Sentinel, or Google Chronicle, as well as DLP and CASB technologies. Understanding of AI and LLM security risks, including prompt injection, AI-enabled data exfiltration, model or agent misuse, and shadow AI. Familiarity with non-human identity concepts, including service accounts, API keys, OAuth tokens, and their associated security risks. Understanding of threat detection methodologies and frameworks such as MITRE ATT&CK; exposure to MITRE ATLAS or the OWASP LLM Top 10 is strongly preferred. Ability to interpret security logs, API telemetry, and structured or unstructured investigation data. Basic scripting or query skills in Python, SQL, SPL, KQL, or comparable technologies for security investigations and reporting. Strong written documentation skills and the ability to communicate complex technical findings through clear, risk-based narratives. Familiarity with cloud environments such as AWS, Azure, or GCP. Demonstrated, hands-on AI security experience in at least one relevant area, such as AI/LLM risk testing, prompt-injection investigation, AI-specific data-exfiltration analysis, shadow AI discovery, CASB/SWG-based application discovery, non-human identity investigations, or agentic AI/MCP security. Practical experience should include a specific example of identifying a security issue, investigating its underlying cause, and contributing to an outcome or remediation. Exposure to agentic AI or MCP-based architectures from either a security or engineering perspective is valuable, including experience with technologies such as LangChain, AutoGen, CrewAI, or MCP servers. Hands-on exposure to AI governance frameworks such as ISO 42001, NIST AI RMF, or EU AI Act risk classifications is advantageous, particularly through audit evidence collection or control testing. Experience with security platforms such as Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable technologies is a plus. Exposure to ML-based anomaly detection or NLP-driven log analysis is beneficial. Security certifications such as Security+, CISSP Associate, or relevant AI/ML security credentials are advantageous. Strong analytical, investigative, problem-solving, and cross-functional collaboration skills. Benefits: Remote working opportunity from India. Opportunity to work at the intersection of cybersecurity, AI, governance, and emerging technology. Exposure to enterprise-scale AI security, threat detection, data protection, and identity-security challenges. Collaboration with multidisciplinary teams spanning security operations, engineering, identity, legal, automation, and governance. Opportunities to contribute to AI governance and compliance initiatives, including ISO 42001 and emerging AI regulatory requirements. Professional growth through hands-on work with evolving AI security technologies, frameworks, and attack patterns. Inclusive and collaborative working environment. Equal opportunity employment and reasonable accommodation for qualified individuals, in accordance with applicable requirements.