[Hiring] AI Security Analyst @8am

Role Description

The AI Security Analyst is a hybrid role combining security operations monitoring with AI-specific risk management and governance support. The role focuses on identifying, assessing, and mitigating risks associated with AI use, particularly generative AI, LLMs, and agentic systems, across internal tools and customer-facing platforms, while contributing to traditional security monitoring. The role does not involve building or training AI models; it secures how AI is deployed, governed, monitored, and used.

Location: Czech Republic (Remote). Working hours for this role are aligned to U.S. Central Time (Austin) core business hours to ensure real-time collaboration with the U.S.-based security leadership and compliance team.

This role is hired through an Employer of Record (EOR) partner in the Czech Republic.

What you'll do:

• AI security and risk management:
  • Identify and mitigate AI-specific threats: prompt injection, jailbreaking and adversarial inputs, sensitive information disclosure, insecure output handling and excessive agency, model misuse and overreliance, and supply chain vulnerabilities in third-party AI services and models.
• AI use-case review:
  • Triage and risk-assess proposed AI use cases with Engineering, Product, Legal, and Privacy before production deployment; recommend controls and document decisions.
• Agentic governance support:
  • Support the operation of the company's agentic-work governance model: autonomy classification reviews, agent activity monitoring, and evidence collection for governance reviews.
• Vendor and model review:
  • Evaluate third-party AI vendors, model providers, and AI-enabled features for security posture and data handling; maintain the approved-provider view.
• Security operations and monitoring:
  • Perform SOC-style monitoring, alert triage, and investigation across cloud, application, and AI-enabled systems, including AI API usage and data flows; enhance detection rules and logging for AI-specific activity.
• Compliance and governance support:
  • Support audit readiness for SOC 2 and PCI DSS and alignment with emerging AI frameworks (NIST AI RMF, OWASP LLM Top 10, ISO/IEC 42001 as the program matures); document AI security controls and risk assessments.
• Incident support:
  • Support AI-related incident response, investigation, and post-incident analysis.

Qualifications

• 3+ years in security operations, security analysis, or GRC with hands-on technical exposure.
• Working understanding of LLM-specific threat classes (OWASP LLM Top 10) and AI risk frameworks (NIST AI RMF).
• Ability to read logs, write basic queries and scripts, and investigate independently.
• Strong written English and documentation discipline; comfortable in a distributed team.
• Demonstrated experience leveraging AI tools and technologies to improve workflows, enhance decision-making, or drive innovation.

Bonus points:

• Experience monitoring or governing agentic AI systems, MCP integrations, or AI developer tooling.
• Fintech, legal-tech, or other regulated-industry background.

Benefits

• Performance bonus opportunities and employee referral rewards.
• Flexible Time Off (FTO) and 13 paid public holidays aligned with the Czech calendar.
• Paid sick leave with additional support through the Czech social security system.
• Maternity, paternity, and parental leave in line with Czech regulations, plus additional paid paternity leave from 8am.
• Full statutory benefits, including public health insurance, social security, pension, and work accident coverage.
• Access to Coursera (including Gen AI Academy) and ongoing professional development.
• Clear growth paths, regular feedback, and opportunities for advancement.