AlphaSense India - AI Security Engineer

• 3-5+ years in security analysis, SOC, or GRC analyst roles • Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling • Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI • Familiarity with non-human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges • Understanding of threat detection logic (MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 a plus) • Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting • Strong written documentation habits • Ability to translate technical findings into clear, risk-based narratives Familiarity with cloud environments (AWS, Azure, or GCP) • Required AI Security Depth (must demonstrate genuine, applied experience in at least one of the following — not coursework, certifications, or familiarity alone) • at least one • Hands-on AI/LLM risk testing or investigation: prompt injection testing, model/agent misuse investigation, or AI-specific data exfiltration analysis • Hands-on AI/LLM risk testing or investigation • CASB/SWG-based application discovery: unsanctioned SaaS, browser extension, or shadow IT/shadow AI detection using tools such as Netskope, Zscaler, Microsoft Defender for Cloud Apps, Wiz, or similar • CASB/SWG-based application discovery • Non-human identity investigation: API key, OAuth token, or service account misuse investigation and risk assessment (administration alone does not qualify — we're looking for investigative/risk experience) • Non-human identity investigation • Agentic AI or MCP-based architecture exposure: from either the security or engineering side — e.g., securing, testing, or building agent tool-use pipelines (LangChain, AutoGen, CrewAI, MCP servers) • Agentic AI or MCP-based architecture exposure • Candidates should be prepared to describe a specific example — what they found, how they investigated it, and what the outcome was — rather than listing this as a resume skill. • Threat Detection Logic • Understanding of MITRE ATT&CK; exposure to MITRE ATLAS or OWASP LLM Top 10 strongly preferred • Hands-on (not just conceptual) exposure to AI governance frameworks — ISO 42001, NIST AI RMF, EU AI Act risk tiers — ideally through audit evidence collection or control testing (SOC 2, ISO, or similar) • Direct experience with any of: Netskope, Zscaler, Wiz, Orca Security, Microsoft Purview, Abnormal Security, Bolster AI, or comparable AI-aware security platforms • Exposure to ML-based anomaly detection or NLP-driven log analysis • Certifications: Security+, CISSP (Associate), or AI-specific credentials (e.g., AI/ML security, OWASP AI, GIAC) • AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination. • In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works. • Recruiting Scams and Fraud • We at AlphaSense have been made aware of fraudulent job postings and individuals impersonating AlphaSense recruiters. These scams may involve fake job offers, requests for sensitive personal information, or demands for payment. Please note: • AlphaSense never asks candidates to pay for job applications, equipment, or training. • All official communications will come from an @alpha-sense.com email address. • If you’re unsure about a job posting or recruiter, verify it on our Careers page. • If you believe you’ve been targeted by a scam or have any doubts regarding the authenticity of any job listing purportedly from or on behalf of AlphaSense please contact us. Your security and trust matter to us.