Cloud Security Analyst: Attack Surface & AI Safeguards

Boston Consulting Group (BCG); Atlanta (GA); On-site; USD 77,000 - 90,000; Full time

Benefits offered by this job

Health insurance premiums covered

Dental coverage

Vision insurance

Gym membership reimbursement

Profit Sharing Retirement Fund

Parental Leave

Paid time off

Sick time

Job summary

Boston Consulting Group (BCG) is seeking a Security Operations professional to protect our global multi-cloud environment. You will monitor cloud and AI security exposures across AWS, Azure, and Google Cloud, triage findings, and translate risk into actionable guidance for engineering teams.

The role emphasizes collaborative, data-driven remediation and shift-left security practices. You will collaborate with cloud and platform engineers, security architects, threat intelligence, and DevSecOps

Qualifications

• 2–4 years in information security, including 2+ years in cloud security operations.
• Hands‑on experience triaging findings in CNAPP or cloud security platforms.
• Working knowledge of AWS, Azure, or Google Cloud security fundamentals.
• Ability to assess exploitability, permissions, data exposure, and attack path context.
• Basic awareness of AI workload risks, including model access and inference endpoint exposure.
• Clear written communication for developer-facing findings, remediation steps, and escalation notes.

Responsibilities

• Monitor, triage, and investigate findings across CNAPP capabilities, including CSPM, CIEM, KSPM, CWPP, IaC security, secrets detection, SCA/SBOM, API security posture, external attack surface management, and AI workload exposure.
• Apply contextual risk reasoning to cloud and AI-adjacent findings, considering exploitability, attack path reachability, effective permissions, data exposure, model access, and potential blast radius.
• Help identify toxic combinations across cloud, identity, workload, API, and AI service configurations that may create meaningful exposure when chained together.
• Investigate zero-day and critical vulnerability exposure across cloud workloads, containerized services, inference endpoints, orchestration layers, and supporting data stores.
• Monitor AI and LLM workload risks such as exposed inference endpoints, overly permissive model access, unsafe secrets handling, vector store exposure, and LLMOps pipeline misconfigurations.
• Support remediation by translating findings into clear, developer-actionable guidance, tracking open items, following up with asset owners, and escalating aged or blocked issues with clear risk context.
• Contribute to shift-left security by reviewing IaC and CI/CD findings, supporting security guardrail adoption, and helping reduce recurring cloud and AI workload misconfigurations.
• Write scripts, improve saved queries, update runbooks, and contribute observations that improve CNAPP signal quality, automation, and operational consistency.

Skills

Python

Bash

API experience

Tools

CNAPP

AWS

Azure

Google Cloud

Job description

Boston Consulting Group (BCG) is seeking a Security Operations professional to protect our global multi-cloud environment. You will monitor cloud and AI security exposures across AWS, Azure, and Google Cloud, triage findings, and translate risk into actionable guidance for engineering teams.

The role emphasizes collaborative, data-driven remediation and shift-left security practices. You will collaborate with cloud and platform engineers, security architects, threat intelligence, and DevSecOps