Overview

As AI and Cloud Security Analyst, you provide day-to-day L2 coverage of the AI security detection fabric, triaging and supporting investigations across runtime defense, behavioral monitoring, model security, and adversarial testing. You translate telemetry into actionable OCR reports for leadership and auditors, and monitor cloud security posture across Azure, AWS, and GCP. You work with a small team to refine detections, runbooks, and enforcement, while assisting with compliance evidence and EU AI Act considerations.

This role combines security operations, data analytics, and cross-functional collaboration to reduce AI and cloud risk.

Compensaciones / Beneficios remote work flexible hours career development programs

Life Empowerment Assistance Program diversity, equity & inclusion global onboarding program

Responsabilidades

L2 coverage of the AI Security toolset and detections across runtime defense, intent/behavioral anomalies, model-level alerts, and adversarial signals

Investigate AI-specific events across five archetypes (embedded SaaS copilots, low-code/no-code agents, homegrown pipelines, device agents, homegrown models) and header indicators (prompt injection, data leakage, RAG poisoning)

Maintain agent inventory hygiene and risk-scoring context to support runtime enforcement and fast-track approvals

Query and correlate telemetry (KQL/SQL), build dashboards, track metrics like detection volumes, containment rates, MTTD/MTTR, and policy-violation trends

Produce recurring OCR dashboards and executive summaries; support NIST AI RMF evidence and EU AI Act-related evidence

Document cases rigorously and contribute to rule tuning, runbook refinement,



and closed-loop improvements

Develop fluency in OWASP Top 10 for LLM and Agentic Applications and MITRE ATLAS as investigation taxonomy

Monitor cloud security alerts across CSPM for Azure, AWS, and GCP; route/remediate/escalate per playbook

Support cloud compliance monitoring against CIS Benchmarks and NIST 800-53 r5/CSF 2.0; assist with policy updates

Assist with cloud workload vulnerability triage and security-signal reviews for Microsoft 365 / Google Workspace

Collaborate with L3 engineer, SOC, cloud teams, and incident responders for investigations and enrichment spanning cloud, identity, endpoint, and AI telemetry

Requisitos principales Solid security operations fundamentals: alerting, triage, validation, incident classification, escalation, case management

Strong data analytics and reporting using KQL/SQL; dashboard/report development for technical and executive audiences

Foundational AI/GenAI security awareness (prompt injections, jailbreaks, data leakage); familiarity with OWASP LLM Top 10 and MITRE ATLAS

Working knowledge of one-cloud security (Azure/AWS/GCP) with CSPM/CWPP concepts and cloud identity basics

Scripting for automation (PowerShell and/or Python)

Familiarity with CIS Benchmarks and NIST (800-53, CSF); awareness of NIST AI RMF and EU AI Act beneficial for EU candidates

Analytical rigor, attention to detail, clear English communication across integral teams

Analytical mindset

Effective communication across time zones

Collaborative team player

KQL and/or SQL for data querying

PowerShell and/or Python scripting

Experience with AI/GenAI security concepts (prompt injection, jailbreaks, data leakage)

📌 AI and Cloud Security Analyst (Barcelona)
🏢 TD Synnex
📍 Barcelona