Sr. Cyber Security Analyst - AI Security & Microsoft 365 Security

About the Company

Responsibilities

• ● Develop, implement, and maintain security policies, standards, and governance frameworks for the secure adoption of AI technologies and AI-enabled business applications, designing future systems for Trillium HealthWorks.
• ● Conduct security assessments and risk analyses of Generative & Agentic AI platforms, Large Language Models (LLMs), AI-powered SaaS applications, and internally developed AI solutions.
• ● Evaluate AI vendors and third-party AI services to ensure compliance with organizational security, privacy, and regulatory requirements.
• ● Collaborate with Legal, Privacy, Compliance, and Risk Management teams to address AI-related security, privacy, intellectual property, and data protection risks.
• ● Define and implement controls for secure use of AI technologies, including data classification, data loss prevention (DLP), access control, and information protection.
• ● Research, analyze, and monitor emerging AI-driven cyber threats, attack techniques, and threat actor activities.
• ● Assess & manage risks associated with:
• ● Prompt injection attacks
• ● Data poisoning
• ● Model manipulation
• ● Adversarial AI attacks
• ● AI-generated phishing campaigns
• ● Deepfake and synthetic media attacks
• ● AI-assisted malware development
• ● Credential theft and social engineering enhanced by AI
• ● Develop detection and response use cases for AI-related threats within SIEM, XDR, and security monitoring platforms.
• ● Collaborate with threat intelligence teams to identify indicators of compromise (IOCs) and emerging AI attack trends.
• ● Recommend security controls and mitigation strategies to defend against AI-enabled attacks.
• ● Monitor security alerts, events, and incidents related to AI platforms, Microsoft 365 environments, cloud services, and enterprise applications.
• ● Investigate security incidents involving AI systems, Microsoft 365 services, user identities, and cloud resources.
• ● Participate in incident response activities, root cause analysis, containment, eradication, and recovery efforts.
• ● Develop incident response procedures and playbooks for AI-related security incidents.
• ● Support vulnerability management and remediation activities across AI and cloud environments.
• ● Participate in on-call rotation for Security Operation Support after hours.
• ● Assess AI and Microsoft cloud solutions against cybersecurity frameworks and industry best practices.
• ● Conduct security reviews, threat modeling, and architecture assessments for AI deployments and cloud services.
• ● Validate security controls through configuration reviews, testing, and continuous monitoring.
• ● Support implementation of Zero Trust security principles across Microsoft 365 and AI environments.
• ● Provide guidance and training to employees on the secure use of AI tools, Microsoft Copilot, and cloud collaboration services.
• ● Develop awareness materials addressing AI-related risks including data leakage, prompt security, phishing, and deepfake threats.
• ● Promote secure and responsible AI usage across the organization.
• ● Secure Microsoft 365 services including:
• ● Microsoft Entra ID (Azure AD)
• ● Microsoft Defender for Endpoint
• ● Microsoft Purview
• ● Microsoft Intune
• ● Microsoft Teams
• ● Exchange Online
• ● SharePoint Online
• ● OneDrive for Business

Requirements

• ● The ideal candidates will, at minimum, have 5 years of work experience in information security working in a regulated industry, preferably health care with responsibility in cloud security, identity security, security operations, or risk management.
• ● Be familiar with government and industry regulations that involve information security.
• ● A university degree in Information Security, Computer Science, Information Technology or related discipline is required.
• ● Certified Information Systems Security Professional (CISSP) or equivalent industry certification is an advantage.
• ● Hands-on experience securing Microsoft M365 and Microsoft Security Technologies
• ● Experience assessing cybersecurity risks associated with cloud services, SaaS platforms, and emerging technologies.
• ● Experience with AI security, Generative AI governance, or AI risk management is highly desirable.
• ● Strong knowledge of:
• ● Microsoft 365 Security and Compliance capabilities
• ● Microsoft Entra ID (Azure AD)
• ● Microsoft Defender Security Suite
• ● Microsoft Purview
• ● Microsoft Intune
• ● Conditional Access and Identity Security
• ● Data Loss Prevention (DLP)
• ● SIEM and XDR technologies
• ● Cloud security principles and Zero Trust architecture
• ● Understanding of:
• ● Generative AI platforms and LLM technologies
• ● AI security risks and threat models
• ● AI governance frameworks
• ● Secure AI implementation practices
• ● Threat intelligence and cyber threat analysis
• ● Familiarity with scripting and automation tools such as PowerShell, Python, or similar technologies.
• ● Microsoft Certified: Cybersecurity Architect Expert
• ● Microsoft Certified: Security Operations Analyst Associate
• ● Microsoft Certified: Identity and Access Administrator Associate
• ● CISSP (Certified Information Systems Security Professional)
• ● CCSP (Certified Cloud Security Professional)
• ● AI security or cloud security certifications are considered an asset
• ● NIST Cybersecurity Framework (CSF)
• ● NIST AI Risk Management Framework (AI RMF)
• ● ISO 27001
• ● ISO 42001
• ● CIS Critical Security Controls
• ● Zero Trust Security Principles
• ● MITRE ATT&CK Framework
• ● Microsoft Secure Future Initiative (SFI) principles
• ● Privacy and data protection regulations
• ● Secure adoption and governance of AI technologies across the enterprise.