[Hiring] AI Security Analyst @Iconma Portal

Role Description

Our Client, a Research, Recruiting, Licensing, Education, Entrepreneurship company, is looking for an AI Security Analyst for their Remote location.

• Client IT provides AI services to 110K students, faculty, and staff for teaching, research, and university operations.
• These services include:
  • Cloudforce’s nebulaONE multi-model AI platform hosted in Microsoft Foundry
  • Commercial LLM offerings such as Microsoft Copilot, ChatGPT EDU, Claude EDU, and Google Gemini Enterprise
  • Connectors and plugins
  • An AI gateway (in procurement)
  • Other associated components (e.g. MCP servers)
• This position will be responsible for:
  • Evaluating the security of the AI services to identify risks
  • Recommending compensating controls and new security products
  • Advising the teams on AI-specific security topics
  • Helping build knowledge in secure AI practices
• Platform & integration risk evaluation:
  • Evaluate new releases and capabilities across AI platforms and tools for security risks
  • Evaluate integrations, connectors, and plug-ins linking AI tools to university data sources
  • Assess agentic-specific risks — standing credentials, autonomous tool access, and data exfiltration by agents
• Risk assessment & decision authority:
  • Supply AI-specific threat expertise within the university's tiered AI risk assessment process
  • Recommend go/no-go decisions and escalate to Information Security’s Director or Consulting and Architecture and CISO
• Advisory:
  • Advise the AI team on security questions
  • Advise on AI architecture to ensure security is considered and integrated
  • Advise on security tooling to strengthen the AI ecosystem
  • Advise on vendor and third-party risk, including data processing agreements, SOC 2 reports, data residency, and sub-processors
• Building leverage (scaling expertise beyond individual assessments):
  • Enhance AI security knowledge and advisory capabilities within the existing team
  • Define reusable secure baselines and reference configurations for each AI platform
  • Ground recommendations in recognized frameworks — NIST AI RMF, the OWASP Top 10 for LLMs, and MITRE ATLAS
• Staying current:
  • Track the evolving AI threat landscape — new attack techniques, platform changes, and emerging standards
  • Fold changes into assessments and baselines

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field, or equivalent experience
• 3+ years of experience in cybersecurity, application security, cloud security, or related technical security roles
• Hands-on experience with AI/ML systems, LLM applications, or data pipelines
• Strong understanding of secure coding, authentication, authorization, API security, and cloud security
• Familiarity with adversarial ML concepts, model security, and AI risk management

Requirements

• Experience securing generative AI applications, RAG systems, or model serving platforms
• Familiarity with frameworks and guidance such as OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, NIST AI RMF, or MITRE ATLAS
• Working knowledge of at least two compliance frameworks: FERPA, HIPAA, NIST 800-53/800-171, or SOC 2
• Understanding of privacy, data governance, and regulatory considerations for AI
• Relevant certifications such as CISSP, GSEC, CSSLP, AWS Security Specialty, or similar

Benefits

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities