Information Technology Security Analyst

Tieto; United States; On-site; USD 100,000 - 160,000; Full time

Job summary

Tieto is seeking an AI Security Analyst to identify, assess, and mitigate security risks in AI/ML systems, including LLM-based applications, data pipelines, and APIs. You will secure AI infrastructure, support governance and compliance, and work with cross-functional teams to embed security into AI solutions.

Responsibilities include threat modeling, vulnerability assessments, incident monitoring, and risk documentation.

Qualifications

• 3+ years of experience in cybersecurity, application security, cloud security, or a related field.
• Understanding of AI/ML and generative AI concepts.
• Knowledge of LLM security and common AI attack vectors.
• Experience with threat modeling, vulnerability assessment, and risk management.
• Knowledge of APIs, authentication, authorization, encryption, and data security.
• Familiarity with AWS/Azure/GCP security.
• Understanding of security frameworks such as OWASP, NIST AI RMF, and MITRE ATT&CK.

Responsibilities

• Assess security risks associated with AI/ML applications and platforms.
• Identify vulnerabilities in LLM applications, AI APIs, models, datasets, and supporting infrastructure.
• Conduct threat modeling and security assessments for AI solutions.
• Evaluate risks such as prompt injection, data leakage, insecure model access, model manipulation, and excessive AI privileges.
• Monitor AI systems for security incidents, anomalies, and unauthorized activity.
• Develop and implement security controls for AI applications and infrastructure.
• Support AI governance, risk, and compliance activities.
• Review AI solution architecture from a security perspective.
• Work with cybersecurity, cloud, application, data, and AI/ML teams.
• Maintain security documentation, risk registers, assessment reports, and remediation plans.
• Support incident response involving AI systems.Keep current with emerging AI security threats, vulnerabilities, and industry frameworks.

Skills

Cybersecurity

AI/ML concepts

LLM security

Threat modeling

Vulnerability assessment

API security

Security frameworks

Job description

We are seeking an AI Security Analyst to identify, assess, and mitigate security risks associated with artificial intelligence and machine-learning systems. The role involves securing AI applications, LLM-based solutions, data pipelines, models, APIs, and AI infrastructure while supporting AI governance and compliance initiatives.

Key Responsibilities

• Assess security risks associated with AI/ML applications and platforms.
• Identify vulnerabilities in LLM applications, AI APIs, models, datasets, and supporting infrastructure.
• Conduct threat modeling and security assessments for AI solutions.
• Evaluate risks such as prompt injection, data leakage, insecure model access, model manipulation, and excessive AI privileges.
• Monitor AI systems for security incidents, anomalies, and unauthorized activity.
• Develop and implement security controls for AI applications and infrastructure.
• Support AI governance, risk, and compliance activities.
• Review AI solution architecture from a security perspective.
• Work with cybersecurity, cloud, application, data, and AI/ML teams.
• Maintain security documentation, risk registers, assessment reports, and remediation plans.
• Support incident response involving AI systems.Keep current with emerging AI security threats, vulnerabilities, and industry frameworks.

Required Skills

• 3+ years of experience in cybersecurity, application security, cloud security, or a related field.
• Understanding of AI/ML and generative AI concepts.
• Knowledge of LLM security and common AI attack vectors.
• Experience with threat modeling, vulnerability assessment, and risk management.
• Knowledge of APIs, authentication, authorization, encryption, and data security.
• Familiarity with AWS/Azure/GCP security.
• Understanding of security frameworks such as OWASP, NIST AI RMF, and MITRE ATT&CK.