AI Security Engineer

AlphaSense; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

AlphaSense seeks an AI Security Analyst to lead the front line in detecting, investigating, and containing risk across every AI tool, agent, and model within AlphaSense s environment. The role emphasizes governance, risk assessment, and proactive containment of shadow AI deployments.

You will monitor tools and data flows, investigate anomalous AI activity, and collaborate across Security Operations, Identity, Legal, and Engineering teams to strengthen incident response and risk reporting.

Qualifications

• 3-5+ years in security analysis (SOC or GRC) roles.
• Experience with SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling.
• Understanding of AI/LLM risk concepts and prompt injection risks.
• Familiarity with non-human identities (service accounts, API keys, OAuth tokens).
• Knowledge of MITRE ATT&CK/ATLAS and OWASP LLM Top 10.
• Ability to read and interpret logs and API telemetry for investigations.
• Basic scripting or query proficiency (Python, SQL, or SPL/KQL).
• Ability to translate findings into risk-based narratives.

Responsibilities

• Detect, investigate, and contain risk across AI tools, agents, and models in AlphaSense environment.
• Monitor CASB/SWG OAuth and endpoint telemetry to identify unsanctioned AI tools and extensions.
• Investigate alerts related to autonomous agents and AI-powered workflows and drive remediation.
• Monitor AI data exfiltration and enforce AI-specific DLP controls.
• Govern AI tool usage and collaborate with Engineering to ensure compliance of code-assist tools.
• Maintain AI activity logging and support audits (ISO 42001, EU AI Act readiness).
• Tune detection rules and feed patterns into the Automation Engineer's playbook backlog.
• Collaborate with Security Operations, Identity, Legal, and AI/ML Engineering for incident response alignment.

Skills

Security analysis

SIEM (Splunk)

GRC

AI/LLM risk

Threat detection logic

Scripting (Python/SQL)

Cloud fundamentals

Tools

Netskope

Zscaler

Wiz

Orca Security

Microsoft Purview

Job description

About AlphaSense

justify 12pt AlphaSense is the AI platform redefining market intelligence and workflow orchestration trusted by thousands of leading organizations to drive faster more confident decisions in business and finance. The platform combines domain-specific AI with a vast content universe of over 500 million premium business documents including equity research earnings calls expert interviews filings news and internal proprietary content. Purpose-built for speed accuracy and enterprise-grade security AlphaSense helps teams extract critical insights uncover market-moving trends and automate complex workflows with high-quality outputs. With AI solutions like Generative Search Generative and Deep Research AlphaSense delivers the clarity and depth professionals need to navigate complexity and obtain accurate real-time information quickly. For more information visit a www.alpha-sense.com. Come join us.

About the Role

We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting investigating and containing risk across every AI tool agent and model touching AlphaSense s environment.

Key Responsibilities

• table collapse border-color black border-style solid border= 1 black AI Tool Discovery Shadow AI Monitoring
• black Continuously monitor CASB/SWG OAuth and endpoint telemetry to discover unsanctioned AI tools browser extensions and API-level agents in use across the business. Classify findings by risk tier and elevate unauthorized deployments for containment.
• black Rogue Agent Detection Investigation
• black Investigate alerts related to autonomous agents and AI-powered workflows (e.g. anomalous tool chains unexpected data access credential misuse) including threats such as OpenClaw and similar agent-based attack patterns. Document findings and drive remediation with the Automation Engineer and Identity teams.
• black AI Data Exfiltration Detection DLP
• black Monitor DLP and AI usage logs for signs of sensitive data leaving the environment through AI tools (prompts uploads plugins MCP connectors). Tune detection rules and validate that AI-specific DLP controls are operating as designed.
• black Developer AI Tool Governance
• black Monitor usage of developer-facing AI tools (GitHub Copilot Claude Code Codex and similar) for policy compliance credential exposure and non-human identity risk. Partner with Engineering to ensure code-assist and agentic dev tools operate within approved guardrails.
• black AI Logging Retention Audit Support
• black Maintain and validate AI activity logging and data retention controls to ensure auditability. Assemble and organize evidence supporting ISO 42001 audits EU AI Act readiness and internal AI impact assessments.
• black Detection Tuning Continuous Improvement
• black Analyze false positive/negative trends across AI security detections and recommend threshold and logic adjustments. Feed recurring patterns into the Automation Engineer s playbook backlog.
• black Cross-functional Collaboration
• black Partner with Security Operations Identity Legal and AI/ML Engineering to align findings with existing incident response processes and support the Director in preparing risk findings for governance council and executive reporting.

Who You Are

Basic Requirements

3-5+ years in security analysis SOC or GRC analyst roles Working knowledge of SIEM platforms (Splunk Microsoft Sentinel Google Chronicle) and DLP/CASB tooling Understanding of AI/LLM risk concepts prompt injection data exfiltration via AI tools model/agent misuse shadow AI Familiarity with non-human identity concepts (service accounts API keys OAuth tokens) and their security challenges Understanding of threat detection logic (MITRE ATT;CK exposure to MITRE ATLAS or OWASP LLM Top 10 a plus) Comfortable reading and interpreting logs API telemetry and structured/unstructured investigation data Basic scripting or query proficiency (Python SQL or SPL/KQL) for investigation and reporting written documentation habits Ability to translate technical findings into clear risk-based narratives Familiarity with cloud environments (AWS Azure or GCP)

Required AI Security Depth (must demonstrate genuine applied experience in strong at least one of the following not coursework certifications or familiarity alone)

Hands-on AI/LLM risk testing or investigation prompt injection testing model/agent misuse investigation or AI-specific data exfiltration analysis CASB/SWG-based application discovery unsanctioned SaaS browser extension or shadow IT/shadow AI detection using tools such as Netskope Zscaler Microsoft Defender for Cloud Apps Wiz or similar Non-human identity investigation API key OAuth token or service account misuse investigation and risk assessment (administration alone does not qualify we re looking for investigative/risk experience) Agentic AI or MCP-based architecture exposure from either the security or engineering side e.g. securing testing or building agent tool-use pipelines (LangChain AutoGen CrewAI MCP servers)

Candidates should be prepared to describe a specific example what they found how they investigated it and what the outcome was rather than listing this as a resume skill.

Threat Detection Logic

Understanding of MITRE ATT;CK exposure to MITRE ATLAS or OWASP LLM Top 10 strongly preferred

Nice to Have

Hands-on (not just conceptual) exposure to AI governance frameworks ISO 42001 NIST AI RMF EU AI Act risk tiers ideally through audit evidence collection or control testing (SOC 2 ISO or similar) Direct experience with any of Netskope Zscaler Wiz Orca Security Microsoft Purview Abnormal Security Bolster AI or comparable AI-aware security platforms Exposure to ML-based anomaly detection or NLP-driven log analysis Certifications Security+ CISSP (Associate) or AI-specific credentials (e.g. AI/ML security OWASP AI GIAC)

Certification Security+ CISSP (Associate) or AI-specific credentials (e.g. AI/ML security OWASP AI GIAC)
12pt

12pt AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports inspires and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race color sex (including pregnancy) national origin age religion marital status sexual orientation gender identity gender expression military or veteran status disability or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense including recruitment hiring training advancement and termination.

12pt In addition it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws regulations and ordinances where a particular employee works.