AI Security Analyst: Shadow AI & Data Protection

Remote; San Francisco (CA); On-site; USD 140,000 - 210,000; Full time

Job summary

AlphaSense is hiring an AI Security Analyst to be the front line for detecting and containing risk across AI tools and models. You will monitor usage, hunt for shadow AI, and turn telemetry into actionable findings for our governance and security teams.

Work with Engineering and Legal to ensure compliance with ISO 42001, EU AI Act readiness, and internal risk assessments. You’ll help tune detections, document investigations, and support executive reporting from our San Francisco security hub.

Qualifications

• 3-5+ years in security analysis, SOC, or GRC analyst roles.
• Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling.
• Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI.
• Familiarity with non-human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges.
• Understanding of threat detection logic (MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus).
• Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data; basic scripting or query proficiency (Python, SQL, or SPL/KQL).
• Strong written documentation habits.
• Ability to translate technical findings into clear, risk-based narratives.
• Familiarity with cloud environments (AWS, Azure, or GCP).

Responsibilities

• AI Tool Discovery & Shadow AI Monitoring: monitor telemetry to discover unsanctioned AI tools and elevate findings.
• Rogue Agent Detection & Investigation: investigate alerts on autonomous agents and AI-powered workflows and drive remediation.
• AI Data Exfiltration Detection & DLP: monitor AI usage logs for signs of data leaving the environment and tune rules.
• Developer AI Tool Governance: monitor developer tools for policy compliance and guardrails.
• AI Logging, Retention & Audit Support: maintain AI activity logging for ISO 42001 audits and EU AI Act readiness.
• Detection Tuning & Continuous Improvement: analyze false positives/negatives and adjust thresholds.
• Cross-functional Collaboration: partner with Security Operations, Identity, Legal, and AI/ML Eng to align findings with incident response.

Skills

Security analysis

SOC/GRC

SIEM tools

DLP/CASB

AI risk

Non-human identity

Threat detection

Scripting/queries

Cloud security

Documentation

Tools

Splunk

Microsoft Sentinel

Google Chronicle

GitHub Copilot

Claude Code

Codex

CASB

Job description

AlphaSense is hiring an AI Security Analyst to be the front line for detecting and containing risk across AI tools and models. You will monitor usage, hunt for shadow AI, and turn telemetry into actionable findings for our governance and security teams.

Work with Engineering and Legal to ensure compliance with ISO 42001, EU AI Act readiness, and internal risk assessments. You’ll help tune detections, document investigations, and support executive reporting from our San Francisco security hub.