AI Security Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an AI Security Analyst based in India.

This role offers the opportunity to help shape the security and governance practices surrounding enterprise AI adoption. The AI Security Analyst will be responsible for identifying, investigating, and reducing risks across AI tools, agents, and models. You will transform security telemetry and usage data into actionable insights that strengthen organizational resilience. Working closely with security, engineering, identity, and governance teams, you will help establish responsible AI practices at scale. The position combines cybersecurity expertise with emerging AI risk management challenges in a global, remote environment. This is an opportunity to contribute to the future of AI security while supporting compliance, innovation, and operational excellence.

Accountabilities:: The AI Security Analyst will act as a key contributor to AI security operations by monitoring AI usage, investigating threats, improving detection capabilities, and supporting governance initiatives. The role requires strong analytical skills, security expertise, and the ability to translate technical findings into business-focused recommendations.

Monitor enterprise AI usage across tools, agents, and models to identify security risks and unauthorized activity.

Detect and investigate shadow AI usage, unauthorized browser extensions, API-based agents, and other unapproved AI deployments.

Analyze AI-related security alerts, including anomalous workflows, unexpected data access, credential misuse, and agent-based attack patterns.

Investigate potential data exfiltration through AI tools, including prompts, uploads, plugins, and connectors.

Monitor developer-facing AI tools for policy compliance, credential exposure, and non-human identity risks.

Work with security and engineering teams to improve AI governance controls and remediation processes.

Review and analyze SIEM, CASB, DLP, endpoint, and API telemetry data to identify emerging threats.

Maintain AI activity logging, retention controls, and audit evidence to support security assessments and compliance initiatives.

Support preparation of documentation for AI governance frameworks, internal reviews, and certification activities.

Analyze detection performance, identify false positives and negatives, and recommend improvements to security monitoring logic.

Collaborate with Security Operations, Identity, Legal, and AI/ML teams to align AI security findings with broader risk management processes.

Requirements:

The ideal candidate should have experience in cybersecurity analysis, security operations, or governance, with a strong interest in emerging AI security challenges. The role requires technical investigation skills, knowledge of security tools, and the ability to communicate risks clearly to different stakeholders.

3–5+ years of experience in security analysis, SOC, GRC, or related cybersecurity roles.

Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, or Google Chronicle.

Knowledge of DLP and CASB technologies and their role in enterprise security monitoring.

Understanding of AI and LLM security risks, including prompt injection, AI-driven data exfiltration, model misuse, and shadow AI.

Familiarity with non-human identity concepts, including service accounts, API keys, and OAuth tokens.

Understanding of threat detection methodologies, including MITRE ATT&CK, with exposure to MITRE ATLAS or OWASP LLM Top 10 considered a plus.

Ability to interpret logs, API telemetry, and structured or unstructured investigation data.

Basic scripting or query experience using Python, SQL, SPL, KQL, or similar technologies.

Strong documentation skills and ability to create clear, risk-based security narratives.

Familiarity with cloud environments such as AWS, Azure, or GCP.

Strong analytical thinking, problem-solving abilities, and collaboration skills.

Nice-to-have qualifications:

Experience with AI governance frameworks such as ISO 42001, NIST AI RMF, or EU AI Act risk frameworks.

Experience supporting security audits, evidence collection, or control testing initiatives.

Familiarity with agentic AI frameworks such as LangChain, AutoGen, CrewAI, or MCP-based architectures.

Experience monitoring browser extensions or OAuth application usage.

Exposure to ML-based anomaly detection or NLP-driven security analysis.

Security certifications such as Security+, CISSP Associate, or AI-focused credentials.

Benefits:

Fully remote work model in India.

Opportunity to work on cutting-edge AI security and governance initiatives.

Exposure to global cybersecurity, AI, and technology teams.

Opportunity to contribute to enterprise AI risk management strategies and compliance programs.

Collaborative environment focused on innovation, security, and continuous improvement.

Professional growth opportunities in an emerging and rapidly evolving technology field.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1