AI/ML Application Security Analyst

American IT Systems•Austin, TX

4d•Onsite

About The Position

We are seeking a highly skilled and motivated Application Security Analyst to join our dynamic team. In this role, you will be at the forefront of securing our cutting-edge applications and AI/ML systems. You will lead efforts to protect our applications from a wide range of threats, ensuring the integrity, confidentiality, and availability of our data and systems. This position requires understanding of application security, including SSPM using CASB, Zero Trust Security, and advanced application protection techniques. This involves conducting security assessments, implementing security measures, and managing security solutions. The analyst will collaborate with developers, DevOps, application owners, and data scientists to secure and monitor sensitive applications and data movements, playing a critical role in our security posture.

Requirements

Conduct comprehensive security assessments of applications and AI/ML systems to identify vulnerabilities and implement robust security measures.
Proficiency in Application security
Proven experience with SSPM, ASPM, CSPM, and Zero Trust Security frameworks.
Bachelor's or master's degree in computer science, Cybersecurity, Data Science, or a related field.
7+ years of experience in application security, cybersecurity, or a related field.
Proven experience with SSPM, ASPM, CSPM, and Zero Trust Security frameworks.
Familiarity with AI/ML security, including MLSecOps, GenAI and LLMs.
Strong knowledge of web application firewall (WAF), API security, DDoS protection, bot mitigation, runtime application self-protection (RASP), and data loss prevention (DLP) technologies.
Proficiency in programming languages such as Python, Java, or C++.
Excellent problem-solving and analytical skills.
Strong communication and teamwork abilities.

Nice To Haves

Proficiency in programming languages such as Python, Java, or C++.
Certifications: CISSP, CISM, CompTIA Security+, CAITI, or equivalent.
Certifications in cloud security (e.g., AWS Certified Security Specialty, Azure Security Engineer Associate).
Experience with cloud platforms (AWS, Azure, Google Cloud).
Experience/knowledge of GenAI security monitoring tools.
Knowledge of regulatory compliance standards (e.g., GDPR, CCPA).

Responsibilities

Conduct comprehensive security assessments of applications and AI/ML systems to identify vulnerabilities and implement robust security measures.
Develop and enforce security policies, standards, and procedures to protect against threats such as data breaches, DDoS attacks, and unauthorized data egress.
Implement and manage SaaS Security Posture Management (SSPM) solutions using existing CASB to ensure continuous security compliance.
Design and enforce Zero Trust Security frameworks to ensure secure access to applications and data, minimizing the risk of unauthorized access.
Utilize and manage advanced security technologies including web application firewalls (WAF), API security, DDoS protection, bot mitigation, and data loss prevention (DLP) to safeguard applications.
Continuously monitor and respond to security incidents, performing root cause analysis and implementing corrective actions.
Leverage AI technologies to enhance the protection of applications, utilizing AI-driven threat detection and response mechanisms.
Secure and monitor data movements to prevent unauthorized data egress, ensuring the protection of sensitive information.
Collaborate with developers, DevOps, and data scientists to implement secure data handling practices and monitor data flows.
Support the security of AI/ML applications, including integrating security practices into the MLOps pipeline and ensuring the secure deployment of large language models (LLMs).
Conduct risk assessments, vulnerability scans and implement mitigation strategies for AI/ML-related vulnerabilities.
Stay updated on latest AI/ML security guidelines/governance, not to exclude, OWASP, NIST and ISO/IEC JTC 1/SC 42.
Implementing these recommendations with existing AI/ML security infrastructure.
Work closely with cross-functional teams to integrate security practices into the application development lifecycle, fostering a culture of security awareness.
Provide security training and awareness programs for developers, DevOps, and other stakeholders to enhance the overall security posture of the organization.