Cyber Security Analyst - Cloud, DevSecOps and AI Security

ISO New England Inc.; Holyoke (MA); Hybrid; USD 127,000 - 150,000; Full time

Benefits offered by this job

Hybrid work environment (3 days/week)

Tuition reimbursement

Wellness programs

Onsite gym

401(k) with employer contributions

Flexible work hours

Relocation assistance

Onsite café coffee

Job summary

ISO New England Inc. is seeking an experienced Cyber Security Analyst to strengthen enterprise cloud, AI, and DevSecOps security initiatives. You will identify vulnerabilities, misconfigurations, and risks across cloud platforms, AI/ML environments, CI/CD pipelines, and CIP settings.

The role requires strong cloud security, vulnerability management, and governance skills, with collaboration across technical teams to implement enterprise security standards. Hybrid work is offered.

Qualifications

• Bachelor’s degree in IT, Cybersecurity, CS or related field.
• Strong experience in cloud security, vulnerability management and DevSecOps.
• Experience with AI security concepts and governance.
• Familiarity with AI threats and responsible AI principles.
• Experience with AWS and Azure cloud platforms and security controls.
• Knowledge of CSPM, IAM, configuration management and monitoring.
• Experience with security monitoring, SIEM and CNAPP tools.
• Hands-on with Terraform, IaC and policy governance (OPA).
• Excellent analytical, troubleshooting, and collaboration skills.

Responsibilities

• Conduct cloud security assessments across AWS and Azure environments.
• Integrate security controls within CI/CD and DevSecOps pipelines.
• Secure AI/ML systems and responsible AI governance across lifecycles.
• Evaluate AI model risks, data usage and third-party AI services.
• Develop AI guardrails, data classification and access controls.
• Perform AI threat modeling for prompt injection and data poisoning.
• Carry out vulnerability assessments and remediation tracking.
• Review baseline configurations, logging, and compliance controls.
• Collaborate with cross-functional teams to embed security into design and operations.
• Support phishing simulations, security awareness and audit evidence collection.

Skills

Cybersecurity experience

Cloud security

DevSecOps

AI security

Security compliance

AWS & Azure

CI/CD security integration

AI governance & risk

Vulnerability management

IAM, CSPM, configuration reviews

Security monitoring & logging

Terraform / IaC / OPA

Data governance & responsible AI

Analytical & collaboration skills

Independent, fast-paced work style

Education

Bachelor’s degree in IT / Cybersecurity / CS

Advanced degree (MS/MA) in Cybersecurity or AI security

CISSP

CISM

AWS Certified Security – Specialty

AZ-500 / Microsoft security cert

Tools

Terraform

Open Policy Agent (OPA)

CI/CD tooling

ECS / EKS

Job description

ISO New England is the independent system operator responsible for ensuring the safe and reliable flow of electricity in our region and planning for the future of the electric grid. We are at the forefront of New England’s ongoing transition to clean energy.

ISO New England is seeking an experienced Cyber Security Analyst to support and enhance enterprise cloud, infrastructure, AI, and DevSecOps security initiatives. This role is responsible for proactively identifying vulnerabilities, compliance gaps, misconfigurations, and security risks across enterprise systems, cloud platforms, AI/ML environments, CI/CD pipelines, and regulated CIP environments.

The ideal candidate will have strong experience in cloud security, vulnerability management, DevSecOps, AI security, and security compliance, with the ability to collaborate across technical teams to implement and maintain enterprise security standards.

What We Offer You

• A stable, mission-driven workplace where your impact truly matters
• A highly engaged work environment that values inclusion, collaboration, and employee safety and wellbeing
• Competitive compensation with a base salary + performance bonus
• Robust benefits package, including:
  • Enhanced 401(k) and financial planning support
  • Tuition reimbursement and professional development
  • Wellness programs, including an onsite gym
  • Flexible work hours
  • Employee Business Networks
  • Free coffee at our onsite café
• Hybrid work environment (3 days/week onsite)
• Distance-based relocation assistance available

How You Will Make An Impact

• Conduct cloud security assessments across AWS and Azure environments, including CSPM, CIEM, IAM, and container security reviews.
• Integrate and support security controls within CI/CD pipelines and DevSecOps environments.
• Assess and secure AI/ML systems, generative AI applications, and AI-enabled business solutions throughout their lifecycle.
• Evaluate risks associated with AI model usage, training data, third-party AI services, and Large Language Model (LLM) integrations.
• Implement AI governance controls to protect sensitive data and prevent unauthorized disclosure through AI platforms.
• Develop security guardrails for AI adoption, including data classification, access controls, prompt security, and responsible AI usage.
• Perform AI threat modeling to identify risks such as prompt injection, data poisoning, model manipulation, model theft, and insecure AI integrations.
• Perform vulnerability assessments, configuration reviews, and remediation tracking across enterprise and CIP systems.
• Review and validate baseline configurations, logging requirements, and compliance controls.
• Evaluate network topology and infrastructure changes to determine CIP impact and SOC visibility requirements.
• Partner with application development, cloud platform engineering, infrastructure, enterprise architecture, IAM, network, SOC, and business teams to integrate security into system design, projects, and operational processes.
• Support phishing simulations, security awareness initiatives, AI security awareness training, and audit evidence collection.
• Provide security recommendations and risk mitigation strategies for cloud, AI, and enterprise environments.
• Support and maintain enterprise security platforms including CNAPP, EDR, vulnerability management, SIEM, DSPM, and cloud security monitoring tools.
• Monitor evolving AI security risks, industry standards, and regulatory requirements.

What We Are Looking For

• Experience in cybersecurity, cloud security, security engineering, or AI security roles.
• Experience with AWS and/or Azure cloud platforms.
• Experience with container orchestration technologies including Amazon ECS and Amazon EKS.
• Experience implementing security controls within CI/CD and DevSecOps environments.
• Knowledge of AI security concepts, including securing generative AI applications, LLMs, AI governance, and AI risk management.
• Familiarity with AI threats such as prompt injection, data leakage, model poisoning, model theft, and insecure AI APIs.
• Knowledge of vulnerability management, cloud security, IAM, CSPM, and configuration management practices.
• Experience with security monitoring and logging platforms.
• Familiarity with Terraform, infrastructure-as-code, and policy governance frameworks such as OPA.
• Understanding of data governance, data protection, and responsible AI principles.
• Strong analytical, troubleshooting, communication, and collaboration skills.
• Self-starter with the ability to work independently in a fast-paced environment.

Desired Not Required

• Bachelor’s degree in information technology, Cybersecurity, Computer Science, or related field.
• Advanced degree such as a Master’s in Cybersecurity Management, Information Assurance, Artificial Intelligence, or related fields.
• Industry cybersecurity, cloud security, and AI security certifications preferred, including:
  • ISC2 Certified Information Systems Security Professional (CISSP)
  • ISACA Certified Information Security Manager (CISM)
  • Amazon Web Services Certified Security – Specialty
  • Microsoft Azure Security Engineer Associate (AZ-500)
  • ISC2 Certified in AI Security (when available)
  • OWASP AI Security and LLM Security knowledge/training

This employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).

The expected salary range for this position is below. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.

Salary Range

$127,000 - $150,000 USD

This is a U.S. based role. If the successful candidate resides outside of the U.S., relocation will be required.

Equal Opportunity: We are proud to be an EEO employer. Applicants for employment are considered without regard to race, color, religion, creed, sex (including pregnancy, childbirth, and related medical conditions), gender identity or expression, sexual orientation, citizenship, national origin, age, ancestry, marital status, disability (including learning, mental, intellectual, and physical), service in the uniformed services, genetic information, or any other status protected by applicable law.

Drug Free Environment: We maintain a drug-free workplace and perform pre-employment substance abuse testing.