[Remote] AI Security Analyst - Data Protection & SaaS Controls
Note: The job is a remote job and is open to candidates in USA. PURE Insurance is a member-owned property and casualty insurer focused on providing exceptional service and smart insurance solutions. They are seeking an AI Security Analyst to secure enterprise AI platforms and SaaS applications, with responsibilities including implementing data protection controls and monitoring AI-related security incidents.
Responsibilities
- Own and implement data protection controls for AI platforms and SaaS applications
- Design and enforce DLP policies across AI prompts, outputs, file uploads, and APIs
- Identify and mitigate AI-specific risks including prompt injection, data exfiltration, and shadow AI usage
- Build and operationalize guardrails such as data masking, prompt filtering, and response inspection
- Analyze and map data flows across AI tools to identify control points and enforce protections
- Secure integrations between AI tools and enterprise systems (APIs, plugins, third-party apps)
- Monitor AI usage and integrate signals into SIEM, DLP, and CASB platforms
- Investigate and respond to AI-related security incidents and data leakage events
- Partner with engineering to embed security controls into AI pipelines and workflows
- Support AI governance by enforcing policies and enabling secure AI adoption
- Participate in a structured on-call rotation
- Provide after-hours and weekend support for security incidents
- Respond to AI-related alerts and data leakage events
- Collaborate with cross-functional teams during incident response
Skills
- 3–6+ years of experience in cybersecurity (DLP, SaaS, or cloud security)
- Hands-on experience implementing DLP controls across endpoints, SaaS, or network layers
- Experience securing SaaS platforms and managing identity/access risks (SSO, OAuth, APIs)
- Strong understanding of data classification and data flow analysis
- Familiarity with AI/LLM tools and associated security risks
- Experience with security tools such as SIEM, CASB, DLP, or API security platforms
- Security certification (or willingness to obtain within 6 months)
- Experience building AI-specific security controls (prompt filtering, output inspection)
- Familiarity with AI security frameworks (NIST AI RMF, OWASP LLM Top 10)
- Experience integrating security controls into engineering workflows
- Scripting or automation skills (Python, APIs)
Company Overview