AI Security Analyst

BetterCloud; India; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

AlphaSense is hiring an AI Security Analyst to be the front line for detecting and containing risk across every AI tool and model in the environment. You will monitor and investigate rogue AI tools, tool chains, and data exfiltration while collaborating with Automation, Identity, Legal, and Engineering teams to strengthen governance.

The role requires 3–5+ years in security analysis, solid experience with SIEM and DLP tools, and familiarity with cloud platforms.

Qualifications

• 3–5+ years in security analysis, SOC, or GRC roles.
• Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling.
• Understanding of AI/LLM risk concepts: prompt injection, data exfiltration, model/agent misuse.
• Familiarity with non‑human identity concepts (service accounts, API keys, OAuth tokens).
• Understanding of threat detection logic (MITRE ATT&CK; exposure to ATLAS or OWASP LLM Top 10 a plus).
• Comfortable reading and interpreting logs and telemetry for investigations.
• Basic scripting or query proficiency (Python, SQL, SPL/KQL).
• Strong documentation habits and ability to translate technical findings into risk narratives.
• Experience with cloud environments (AWS, Azure, or GCP).

Responsibilities

• AI Tool Discovery & Shadow AI Monitoring across CASB/SWG and endpoints.
• Rogue Agent Detection & Investigation; document findings and drive remediation.
• AI Data Exfiltration Detection & DLP tuning; ensure AI controls operate as designed.
• Developer AI Tool Governance with policy compliance and credential exposure.
• AI Logging, Retention & Audit Support for ISO/AI Act readiness.
• Detection Tuning & Continuous Improvement; update playbooks.
• Cross-functional collaboration with Security Ops, Identity, Legal, and AI/ML Engineering.

Skills

Security analysis

SIEM

DLP/CASB tooling

AI/LLM risk concepts

Non-human identities

MITRE ATT&CK / ATLAS / OWASP LLM

Log analysis

Scripting (Python/SQL/SPL/KQL)

Documentation

Cloud platforms (AWS/Azure/GCP)

Tools

GitHub Copilot

Job description

About AlphaSense

The world's most sophisticated companies rely on AlphaSense to remove uncertainty from decision‑making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients' own research content. The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI‑driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S\u0026P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Join us.

About the Role

We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment.

Key Responsibilities

• AI Tool Discovery & Shadow AI Monitoring Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API‑level agents in use across the business. Classify findings by risk tier and **escalate** unauthorized deployments for containment.
• Rogue Agent Detection & Investigation Investigate alerts related to autonomous agents and AI‑powered workflows (e.g., anomalous tool chains, unexpected data access, credential misuse) including threats such as OpenClaw and similar agent‑based attack patterns. Document findings and drive remediation with the Automation Engineer and Identity teams.
• AI Data Exfiltration Detection & DLP Monitor DLP and AI usage logs for signs of sensitive data leaving the environment through AI tools (prompts, uploads, plugins, MCP connectors). Tune detection rules and validate that AI‑specific DLP controls are operating as designed.
• Developer AI Tool Governance Monitor usage of developer‑facing AI tools (GitHub Copilot, Claude Code, Codex, and similar) for policy compliance, credential exposure, and non‑human identity risk. Partner with Engineering to ensure code‑assist and agentic dev tools operate within approved guardrails.
• AI Logging, Retention & Audit Support Maintain and validate AI activity logging and data retention controls to ensure auditability. Assemble and organize evidence supporting ISO 42001 audits, EU AI Act readiness, and internal AI impact assessments.
• Detection Tuning & Continuous Improvement Analyze false positive/negative trends across AI security detections and recommend threshold and logic adjustments. Feed recurring patterns into the Automation Engineer's playbook backlog.
• Cross‑functional Collaboration Partner with Security Operations, Identity, Legal, and AI/ML Engineering to align findings with existing incident response processes, and support the Director in preparing risk findings for governance council and executive reporting.

Who You Are

Basic Requirements

• 3–5+ years in security analysis, SOC, or GRC analyst roles
• Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling
• Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI
• Familiarity with non‑human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges
• Understanding of threat detection logic (MITRE ATT\u0026CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus)
• Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data
• Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting
• Strong written documentation habits
• Ability to translate technical findings into clear, risk‑based narratives
• Familiarity with cloud environments (AWS, Azure, or GCP)

Nice to Have

• Exposure to AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act risk tiers)
• Experience supporting audit evidence collection or control testing (SOC 2, ISO, or similar)
• Familiarity with agentic AI frameworks (LangChain, AutoGen, CrewAI) and MCP‑based tool‑use architectures