Asks for

The ad says“Hands-on AI/LLM risk testing or investigation: prompt injection testing, model/agent misuse investigation, or AI-specific data exfiltration analysis”
The ad says“Ability to translate technical findings into clear, risk-based narratives Familiarity with cloud environments (AWS, Azure, or GCP)”
The ad says“Ability to translate technical findings into clear, risk-based narratives Familiarity with cloud environments (AWS, Azure, or GCP)”
The ad says“Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI”
The ad says“Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling”
The ad says“Ability to translate technical findings into clear, risk-based narratives Familiarity with cloud environments (AWS, Azure, or GCP)”
The ad says“Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling”
The ad says“Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting”
The ad says“Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling”
The ad says“Understanding of threat detection logic (MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus)”
The ad says“Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI”
The ad says“Hands-on AI/LLM risk testing or investigation: prompt injection testing, model/agent misuse investigation, or AI-specific data exfiltration analysis”
The ad says“Familiarity with non-human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges”
The ad says“Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI”
The ad says“Hands-on AI/LLM risk testing or investigation: prompt injection testing, model/agent misuse investigation, or AI-specific data exfiltration analysis”
The ad says“Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting”
The ad says“Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI”
The ad says“Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling”
The ad says“Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting”
The ad says“Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling”
The ad says“Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting”
The ad says“Understanding of threat detection logic (MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus)”

Values

The ad says“Certifications: Security+, CISSP (Associate), or AI-specific credentials (e.g., AI/ML security, OWASP AI, GIAC)”
The ad says“Certifications: Security+, CISSP (Associate), or AI-specific credentials (e.g., AI/ML security, OWASP AI, GIAC)”
The ad says“Certifications: Security+, CISSP (Associate), or AI-specific credentials (e.g., AI/ML security, OWASP AI, GIAC)”
The ad says“Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms”
The ad says“Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers)”
The ad says“Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms”
The ad says“Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers)”
The ad says“Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar)”
The ad says“Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar)”
The ad says“Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers)”
The ad says“Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers)”
The ad says“CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar”
The ad says“Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms”
The ad says“Understanding of MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 strongly preferred”
The ad says“CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar”
The ad says“Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar)”
The ad says“Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms”
The ad says“Understanding of MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 strongly preferred”
The ad says“Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar)”
The ad says“CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar”
The ad says“CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar”

About AlphaSense:

The world’s most sophisticated companies rely on AlphaSense to remove uncertainty from decision-making. With market intelligence and search built on proven AI, AlphaSense delivers insights that matter from content you can trust. Our universe of public and private content includes equity research, company filings, event transcripts, expert calls, news, trade journals, and clients’ own research content.

The acquisition of Tegus by AlphaSense in 2024 advances our shared mission to empower professionals to make smarter decisions through AI-driven market intelligence. Together, AlphaSense and Tegus will accelerate growth, innovation, and content expansion, with complementary product and content capabilities that enable users to unearth even more comprehensive insights from thousands of content sets. Our platform is trusted by over 6,000 enterprise customers, including a majority of the S&P 500. Founded in 2011, AlphaSense is headquartered in New York City with more than 2,000 employees across the globe and offices in the U.S., U.K., Finland, India, Singapore, Canada, and Ireland. Come join us!

About the Role

We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment.

You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture.

Key Responsibilities

AI Tool Discovery & Shadow AI Monitoring	Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in use across the business. Classify findings by risk tier and escalate unauthorized deployments for containment.
Rogue Agent Detection & Investigation	Investigate alerts related to autonomous agents and AI-powered workflows (e.g., anomalous tool chains, unexpected data access, credential misuse) including threats such as OpenClaw and similar agent-based attack patterns. Document findings and drive remediation with the Automation Engineer and Identity teams.
AI Data Exfiltration Detection & DLP	Monitor DLP and AI usage logs for signs of sensitive data leaving the environment through AI tools (prompts, uploads, plugins, MCP connectors). Tune detection rules and validate that AI-specific DLP controls are operating as designed.
Developer AI Tool Governance	Monitor usage of developer-facing AI tools (GitHub Copilot, Claude Code, Codex, and similar) for policy compliance, credential exposure, and non-human identity risk. Partner with Engineering to ensure code-assist and agentic dev tools operate within approved guardrails.
AI Logging, Retention & Audit Support	Maintain and validate AI activity logging and data retention controls to ensure auditability. Assemble and organize evidence supporting ISO 42001 audits, EU AI Act readiness, and internal AI impact assessments.
Detection Tuning & Continuous Improvement	Analyze false positive/negative trends across AI security detections and recommend threshold and logic adjustments. Feed recurring patterns into the Automation Engineer's playbook backlog.
Cross-functional Collaboration	Partner with Security Operations, Identity, Legal, and AI/ML Engineering to align findings with existing incident response processes, and support the Director in preparing risk findings for governance council and executive reporting.

Who You Are

Basic Requirements

3-5+ years in security analysis, SOC, or GRC analyst roles
Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling
Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI
Familiarity with non-human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges
Understanding of threat detection logic (MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus)
Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting
Strong written documentation habits
Ability to translate technical findings into clear, risk-based narratives Familiarity with cloud environments (AWS, Azure, or GCP)

Required AI Security Depth (must demonstrate genuine, applied experience in at least one of the following — not coursework, certifications, or familiarity alone)

Hands-on AI/LLM risk testing or investigation: prompt injection testing, model/agent misuse investigation, or AI-specific data exfiltration analysis
CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar
Non-human identity investigation: API key, OAuth token, or service account misuse investigation and risk assessment (administration alone does not qualify — we're looking for investigative/risk experience)
Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers)

Candidates should be prepared to describe a specific example — what they found, how they investigated it, and what the outcome was — rather than listing this as a resume skill.

Threat Detection Logic

Understanding of MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 strongly preferred

Nice to Have

Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar)
Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms
Exposure to ML-based anomaly detection or NLP-driven log analysis
Certifications: Security+, CISSP (Associate), or AI-specific credentials (e.g., AI/ML security, OWASP AI, GIAC)

AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination.

In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works.

Recruiting Scams and Fraud

We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note:

AlphaSense never asks candidates to pay for job applications, equipment, or training.
All official communications will come from an @alpha-sense.com email address.
If you’re unsure about a job posting or recruiter, verify it on our Careers page.

If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense please contact us. Your security and trust matter to us.