Experteer Overview
¿Es este su próximo empleo? Descúbralo leyendo la descripción completa a continuación y no dude en enviar su candidatura.
As AI and Cloud Security Analyst, you provide day-to-day L2 coverage of the AI security detection fabric, triaging and supporting investigations across runtime defense, behavioral monitoring, model security, and adversarial testing. You translate telemetry into actionable OCR reports for leadership and auditors, and monitor cloud security posture across Azure, AWS, and GCP. You work with a small team to refine detections, runbooks, and enforcement, while assisting with compliance evidence and EU AI Act considerations. This role combines security operations, data analytics, and cross-functional collaboration to reduce AI and cloud risk.
Compensaciones / Beneficios
• L2 coverage of the AI Security toolset and detections across runtime defense, intent/behavioral anomalies, model-level alerts, and adversarial signals
• Investigate AI-specific events across five archetypes (embedded SaaS copilots, low-code/no-code agents, homegrown pipelines, device agents, homegrown models) and header indicators (prompt injection, data leakage, RAG poisoning)
• Maintain agent inventory hygiene and risk-scoring context to support runtime enforcement and fast-track approvals
• Query and correlate telemetry (KQL/SQL), build dashboards, track metrics like detection volumes, containment rates, MTTD/MTTR, and policy-violation trends
• Produce recurring OCR dashboards and executive summaries; support NIST AI RMF evidence and EU AI Act-related evidence
• Document cases rigorously and contribute to rule tuning, runbook refinement,



and closed-loop improvements
• Develop fluency in OWASP Top 10 for LLM and Agentic Applications and MITRE ATLAS as investigation taxonomy
• Monitor cloud security alerts across CSPM for Azure, AWS, and GCP; route/remediate/escalate per playbook
• Support cloud compliance monitoring against CIS Benchmarks and NIST 800-53 r5/CSF 2.0; assist with policy updates
• Assist with cloud workload vulnerability triage and security-signal reviews for Microsoft 365 / Google Workspace
• Collaborate with L3 engineer, SOC, cloud teams, and incident responders for investigations and enrichment spanning cloud, identity, endpoint, and AI telemetry
Responsabilidades
• Solid security operations fundamentals: alerting, triage, validation, incident classification, escalation, case management
• Strong data analytics and reporting using KQL/SQL; xqbhyrx dashboard/report development for technical and executive audiences
• Foundational AI/GenAI security awareness (prompt injections, jailbreaks, data leakage); familiarity with OWASP LLM Top 10 and MITRE ATLAS
• Working knowledge of one-cloud security (Azure/AWS/GCP) with CSPM/CWPP concepts and cloud identity basics
• Scripting for automation (PowerShell and/or Python)
• Familiarity with CIS Benchmarks and NIST (800-53, CSF); awareness of NIST AI RMF and EU AI Act beneficial for EU candidates
• Analytical rigor, attention to detail, clear English communication across general teams
Requisitos principales
• remote work
• flexible hours
• career development programs
• Life Empowerment Assistance Program
• diversity, equity u0026 inclusion
• global onboarding program

📌 AI and Cloud Security Analyst (Barcelona)
🏢 TD Synnex
📍 Barcelona