Cloud & AI Security Analyst - DevSecOps Expert

ISO New England, Inc; Springfield (MA); Hybrid; USD 127,000 - 150,000; Full time

Benefits offered by this job

Hybrid work 3 days onsite

Tuition reimbursement

401(k) with company match

Wellness programs

Onsite gym

Relocation assistance

Employee networks

Free coffee

Job summary

ISO New England, Inc. in Holyoke, MA is seeking an experienced Cyber Security Analyst to secure enterprise cloud, AI, and DevSecOps initiatives across AWS, Azure, and CIP environments.

You will proactively identify vulnerabilities, misconfigurations, and risks while collaborating with development, cloud engineering, and security teams to implement robust controls. The ideal candidate brings expertise in cloud security, vulnerability management, and AI security, with strong collaboration skills

Qualifications

• Experience in enterprise cloud and AI security across multiple platforms.
• Strong collaboration with IAM, network, and dev teams to implement controls.
• Proven ability to assess risks in CI/CD and CIP environments.

Responsibilities

• Conduct cloud security assessments across AWS and Azure.
• Integrate security controls within CI/CD pipelines and DevSecOps environments.
• Assess and secure AI/ML systems, generative AI applications, and AI-enabled business solutions throughout their lifecycle.
• Evaluate risks associated with AI model usage, training data, third-party AI services, and LLM integrations.
• Implement AI governance controls to protect sensitive data and prevent unauthorized disclosure through AI platforms.
• Develop security guardrails for AI adoption, including data classification, access controls, prompt security, and responsible AI usage.
• Perform AI threat modeling to identify risks such as prompt injection, data poisoning, model manipulation, model theft, and insecure AI integrations.
• Perform vulnerability assessments, configuration reviews, and remediation tracking across enterprise and CIP systems.
• Review and validate baseline configurations, logging requirements, and compliance controls.
• Evaluate network topology and infrastructure changes to determine CIP impact and SOC visibility requirements.
• Partner with application development, cloud platform engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into system design, projects, and operational processes.
• Support phishing simulations, security awareness initiatives, AI security awareness training, and audit evidence collection.
• Provide security recommendations and risk mitigation strategies for cloud, AI, and enterprise environments.
• Support and maintain enterprise security platforms including CNAPP, EDR, vulnerability management, SIEM, DSPM, and cloud security monitoring tools.
• Monitor evolving AI security risks, industry standards, and regulatory requirements.

Skills

Cloud security

Vulnerability management

DevSecOps

AI security

Security compliance

AWS

Azure

CI/CD pipelines

IAM

Terraform

OPA

CIP security

Threat modeling

Education

Bachelor’s degree in IT / Cybersecurity / related field

Master’s degree in Cybersecurity or AI (preferred)

Tools

ECS

EKS

CNAPP

EDR

SIEM

DSPM

Cloud security monitoring tools

Job description

ISO New England, Inc. in Holyoke, MA is seeking an experienced Cyber Security Analyst to secure enterprise cloud, AI, and DevSecOps initiatives across AWS, Azure, and CIP environments.

You will proactively identify vulnerabilities, misconfigurations, and risks while collaborating with development, cloud engineering, and security teams to implement robust controls. The ideal candidate brings expertise in cloud security, vulnerability management, and AI security, with strong collaboration skills