Cyber Security Analyst - Cloud, DevSecOps and AI Security
About The Position
ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud, infrastructure, AI, and DevSecOps security initiatives. The role proactively identifies vulnerabilities, compliance gaps, misconfigurations, and security risks across enterprise systems, cloud platforms, AI/ML environments, CI/CD pipelines, and regulated CIP environments. The analyst collaborates with technical and business teams to implement and maintain enterprise security standards. The position conducts cloud security assessments, integrates security controls into CI/CD pipelines, assesses AI/ML systems and generative AI applications, and develops AI governance and security guardrails. It also performs vulnerability assessments and configuration reviews, evaluates CIP impacts and SOC visibility requirements, supports security platforms and awareness activities, and provides risk mitigation recommendations. The role monitors evolving AI security risks, industry standards, and regulatory requirements. The position is hybrid, with three days per week onsite, and is U.S.-based. Relocation is required for a successful candidate who resides outside the United States. The employer does not sponsor work visas for this role.
Requirements
- Experience in cybersecurity, cloud security, security engineering, or AI security roles.
- Experience with AWS and/or Azure cloud platforms.
- Experience with container orchestration technologies, including Amazon ECS and Amazon EKS.
- Experience implementing security controls within CI/CD and DevSecOps environments.
- Knowledge of AI security concepts, including securing generative AI applications, LLMs, AI governance, and AI risk management.
- Familiarity with AI threats such as prompt injection, data leakage, model poisoning, model theft, and insecure AI APIs.
- Knowledge of vulnerability management, cloud security, IAM, CSPM, and configuration management practices.
- Experience with security monitoring and logging platforms.
- Familiarity with Terraform, infrastructure-as-code, and policy governance frameworks such as OPA.
- Understanding of data governance, data protection, and responsible AI principles.
- Strong analytical, troubleshooting, communication, and collaboration skills.
- Ability to work independently as a self-starter in a fast-paced environment.
- Applicants must be able to work in the United States; the employer will not sponsor work visas for this position.
Nice To Haves
- Bachelor’s degree in information technology, Cybersecurity, Computer Science, or a related field.
- Advanced degree such as a Master’s in Cybersecurity Management, Information Assurance, Artificial Intelligence, or a related field.
- Industry cybersecurity, cloud security, and AI security certifications, including CISSP, CISM, AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate (AZ-500), ISC2 Certified in AI Security (when available), or OWASP AI Security and LLM Security knowledge or training.
Responsibilities
- Conduct cloud security assessments across AWS and Azure environments, including CSPM, CIEM, IAM, and container security reviews.
- Integrate and support security controls within CI/CD pipelines and DevSecOps environments.
- Assess and secure AI/ML systems, generative AI applications, and AI-enabled business solutions throughout their lifecycle.
- Evaluate risks associated with AI model usage, training data, third-party AI services, and LLM integrations.
- Implement AI governance controls to protect sensitive data and prevent unauthorized disclosure through AI platforms.
- Develop AI adoption security guardrails covering data classification, access controls, prompt security, and responsible AI usage.
- Perform AI threat modeling to identify risks such as prompt injection, data poisoning, model manipulation, model theft, and insecure AI integrations.
- Perform vulnerability assessments, configuration reviews, and remediation tracking across enterprise and CIP systems.
- Review and validate baseline configurations, logging requirements, and compliance controls.
- Evaluate network topology and infrastructure changes to determine CIP impact and SOC visibility requirements.
- Partner with application development, cloud platform engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into system design, projects, and operational processes.
- Support phishing simulations, security awareness initiatives, AI security awareness training, and audit evidence collection.
- Provide security recommendations and risk mitigation strategies for cloud, AI, and enterprise environments.
- Support and maintain enterprise security platforms, including CNAPP, EDR, vulnerability management, SIEM, DSPM, and cloud security monitoring tools.
- Monitor evolving AI security risks, industry standards, and regulatory requirements.
Benefits
- Competitive base salary and annual performance bonus.
- Enhanced 401(k) with generous employer contributions and financial planning support.
- Student debt benefit.
- Tuition reimbursement and professional development.
- Comprehensive medical, dental, and vision insurance.
- Flexible spending and health savings accounts.
- Life and AD&D insurance.
- Disability insurance.
- Critical illness and hospital indemnity benefits.
- Paid time off and paid leave.
- Wellness program and employee assistance program.
- Onsite gym.
- Flexible work hours.
- Hybrid work environment with three days per week onsite.
- Distance-based relocation assistance.
- Employee Business Networks.
- Free coffee at the onsite café.
- Other company perks.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
