Cloud Security Analyst - AI, DevSecOps & Threat Modeling

ISO New England, Inc; Holyoke (MA); Hybrid; USD 127,000 - 150,000; Full time

Benefits offered by this job

Hybrid work (3 days onsite)

401(k) and financial planning support

Tuition reimbursement

Professional development

Wellness programs

Onsite gym

Relocation assistance

Employee networks

Free coffee at onsite café

Job summary

ISO New England, Inc. in Holyoke, MA is seeking an experienced Cyber Security Analyst to protect enterprise cloud, AI, and DevSecOps security across AWS, Azure, and CI/CD CI environments.

You will assess vulnerabilities, implement AI governance, and collaborate with teams to strengthen security controls throughout the system lifecycle. The role focuses on cloud security, AI security, and secure DevSecOps practices, with hybrid work and relocation assistance available.

Qualifications

• Experience in cybersecurity, cloud security, security engineering, or AI security roles.
• Experience with AWS and/or Azure cloud platforms.
• Experience with container orchestration technologies including Amazon ECS and Amazon EKS.
• Experience implementing security controls within CI/CD and DevSecOps environments.
• Knowledge of AI security concepts, including securing generative AI applications, LLMs, AI governance, and AI risk management.
• Familiarity with AI threats such as prompt injection, data leakage, model poisoning, model theft, and insecure AI APIs.
• Knowledge of vulnerability management, cloud security, IAM, CSPM, and configuration management practices.
• Experience with security monitoring and logging platforms.
• Familiarity with Terraform, infrastructure-as-code, and policy governance frameworks such as OPA.
• Understanding of data governance, data protection, and responsible AI principles.
• Strong analytical, troubleshooting, communication, and collaboration skills.
• Self-starter with the ability to work independently in a fast-paced environment.

Responsibilities

• Conduct cloud security assessments across AWS and Azure environments, including CSPM, CIEM, IAM, and container security reviews.
• Integrate and support security controls within CI/CD pipelines and DevSecOps environments.
• Assess and secure AI/ML systems, generative AI applications, and AI-enabled business solutions throughout their lifecycle.
• Evaluate risks associated with AI model usage, training data, third-party AI services, and LLM integrations.
• Implement AI governance controls to protect sensitive data and prevent unauthorized disclosure through AI platforms.
• Develop security guardrails for AI adoption, including data classification, access controls, prompt security, and responsible AI usage.
• Perform AI threat modeling to identify risks such as prompt injection, data poisoning, model manipulation, model theft, and insecure AI integrations.
• Perform vulnerability assessments, configuration reviews, and remediation tracking across enterprise and CIP systems.
• Review and validate baseline configurations, logging requirements, and compliance controls.
• Evaluate network topology and infrastructure changes to determine CIP impact and SOC visibility requirements.
• Partner with cross-functional teams to integrate security into system design, projects, and processes.
• Support phishing simulations, security awareness initiatives, AI security awareness training, and audit evidence collection.
• Provide security recommendations and risk mitigation strategies for cloud, AI, and enterprise environments.
• Support and maintain enterprise security platforms including CNAPP, EDR, vulnerability management, SIEM, DSPM, and cloud security monitoring tools.
• Monitor evolving AI security risks, industry standards, and regulatory requirements.

Skills

Cloud security

DevSecOps

AI security

AWS

Azure

Kubernetes

Terraform

CI/CD

Vulnerability management

Security monitoring

IAM/CSPM

Education

Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field

Tools

AWS

Azure

Kubernetes

Terraform

OPA

Job description

ISO New England, Inc. in Holyoke, MA is seeking an experienced Cyber Security Analyst to protect enterprise cloud, AI, and DevSecOps security across AWS, Azure, and CI/CD CI environments.

You will assess vulnerabilities, implement AI governance, and collaborate with teams to strengthen security controls throughout the system lifecycle. The role focuses on cloud security, AI security, and secure DevSecOps practices, with hybrid work and relocation assistance available.