<div class="content-intro"><h2><strong>About AlphaSense: </strong></h2> <p style="text-align: justify;"><span style="font-size: 12pt;">AlphaSense is the AI platform redefining market intelligence and workflow orchestration, trusted by thousands of leading organizations to drive faster, more confident decisions in business and finance. The platform combines domain-specific AI with a vast content universe of over 500 million premium business documents — including equity research, earnings calls, expert interviews, filings, news, and internal proprietary content. Purpose-built for speed, accuracy, and enterprise-grade security, AlphaSense helps teams extract critical insights, uncover market-moving trends, and automate complex workflows with high-quality outputs. With AI solutions like Generative Search, Generative Grid, and Deep Research, AlphaSense delivers the clarity and depth professionals need to navigate complexity and obtain accurate, real-time information quickly. For more information, visit <span><a href="http://www.alpha-sense.com" target="_blank">www.alpha-sense.com</a></span>. Come join us.</span></p></div><h3>About the Role</h3> <p>We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. </p> <p>You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture.</p> <h3>Key Responsibilities</h3> <table style="border-collapse: collapse; border-color: black; border-style: solid;" border="1"> <tbody> <tr> <td style="border-color: black;"> <p><strong>AI Tool Discovery & Shadow AI Monitoring</strong></p> </td> <td style="border-color: black;"> <p>Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in use across the business. Classify findings by risk tier and escalate unauthorized deployments for containment.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>Rogue Agent Detection & Investigation</strong></p> </td> <td style="border-color: black;"> <p>Investigate alerts related to autonomous agents and AI-powered workflows (e.g., anomalous tool chains, unexpected data access, credential misuse) including threats such as OpenClaw and similar agent-based attack patterns. Document findings and drive remediation with the Automation Engineer and Identity teams.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>AI Data Exfiltration Detection & DLP</strong></p> </td> <td style="border-color: black;"> <p>Monitor DLP and AI usage logs for signs of sensitive data leaving the environment through AI tools (prompts, uploads, plugins, MCP connectors). Tune detection rules and validate that AI-specific DLP controls are operating as designed.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>Developer AI Tool Governance</strong></p> </td> <td style="border-color: black;"> <p>Monitor usage of developer-facing AI tools (GitHub Copilot, Claude Code, Codex, and similar) for policy compliance, credential exposure, and non-human identity risk. Partner with Engineering to ensure code-assist and agentic dev tools operate within approved guardrails.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>AI Logging, Retention & Audit Support</strong></p> </td> <td style="border-color: black;"> <p>Maintain and validate AI activity logging and data retention controls to ensure auditability. Assemble and organize evidence supporting ISO 42001 audits, EU AI Act readiness, and internal AI impact assessments.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>Detection Tuning & Continuous Improvement</strong></p> </td> <td style="border-color: black;"> <p>Analyze false positive/negative trends across AI security detections and recommend threshold and logic adjustments. Feed recurring patterns into the Automation Engineer's playbook backlog.</p> </td> </tr> <tr> <td style="border-color: black;"> <p><strong>Cross-functional Collaboration</strong></p> </td> <td style="border-color: black;"> <p>Partner with Security Operations, Identity, Legal, and AI/ML Engineering to align findings with existing incident response processes, and support the Director in preparing risk findings for governance council and executive reporting.</p> </td> </tr> </tbody> </table> <h3>Who You Are</h3> <p><strong>Basic Requirements </strong></p> <ul> <li>3-5+ years in security analysis, SOC, or GRC analyst roles </li> <li>Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling </li> <li>Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI </li> <li>Familiarity with non-human identity concepts