About the Role

We are looking for an AI Defense Analyst (remote, from Romania, Labor Contract) to join a newly established cybersecurity capability focused on protecting enterprise AI systems from emerging and sophisticated threats.

As organizations increasingly adopt AI-powered applications, LLMs and autonomous agents, traditional security monitoring alone is no longer sufficient. This role sits at the intersection of cybersecurity, threat detection and AI, with a strong focus on identifying and responding to attacks targeting AI workloads.

This is a ground-floor opportunity: the team and processes are still being built, giving you the chance to help define detection strategies, investigation processes, playbooks and defensive capabilities from the beginning.

‍

‍

What You’ll Do

• Alert Triage & Investigation
  
  • Analyse and investigate security alerts generated by AI-focused detection capabilities.
  • Identify malicious or suspicious AI behaviour, including prompt injection, adversarial prompts, anomalous agent activity and potential data exfiltration.
  • Analyse telemetry and security events to distinguish genuine threats from benign or anomalous behaviour.
• Threat Response & Containment
  
  • Support or execute containment actions when malicious AI behaviour is confirmed.
  • Collaborate with broader Incident Response and Security Operations teams during significant security events.
  • Contribute to root-cause analysis, incident documentation and post-incident reviews.
• Detection & Security Engineering
  
  • Develop and refine detection rules, scripts and automation for AI-related threats.
  • Help improve detection accuracy and reduce false positives.
  • Contribute to the development of new capabilities for identifying malicious intent, anomalous behaviour and attacks against AI workloads.
  • Use Python to build and maintain detection and automation tooling.
• AI Threat Research
  
  • Monitor emerging threats and attack techniques targeting AI/ML systems.
  • Investigate areas such as prompt injection, jailbreaking, model manipulation, data poisoning, agent manipulation and AI-enabled data leakage.
  • Translate security research and emerging attack patterns into practical detection and defensive measures.
• Cross-functional Collaboration
  
  • Work closely with cybersecurity specialists, incident responders, threat hunters, engineers and AI development teams.
  • Communicate technical findings clearly to both technical and non-technical stakeholders.
  • Contribute to the development of processes and playbooks for the new AI security capability.

‍

‍

What We’re Looking For

‍

Must-Have

• 3–5 years of experience in cybersecurity operations: SOC, incident response, or threat detection.
• Working understanding of AI/ML architectures: LLMs, agentic frameworks, tool-calling, prompt engineering.
• Ability to analyse telemetry data from AI systems to identify anomalous patterns, malicious intent, and security-relevant events. 
• Experience with SIEM platforms, log analysis, and anomaly detection methodologies.
• Python proficiency for detection, scripting and automation.
• Comfort operating with ambiguity: this team's processes and tooling are still being defined.
• Fluent English, able to communicate with both technical and non-technical stakeholders.

‍

‍

‍Nice to Have

• Hands-on experience with LLM security, AI security or agentic AI.
• Experience with AI observability or telemetry technologies such as OpenTelemetry.
• Familiarity with SIEM, EDR or other security monitoring platforms.
• Experience developing security detections or automation.
• Knowledge of AI/ML security research and emerging AI attack techniques.
• University degree in Computer Science, Cybersecurity, Artificial Intelligence, Machine Learning or a related field.

‍

Direct experience in AI security is a strong advantage, but not a strict requirement. We are open to strong cybersecurity professionals who have a solid understanding of AI/ML and are motivated to specialise in this emerging field.

‍

‍

‍

Why Join?

• Build something from the ground up – this is a new AI security capability rather than a mature SOC function.
• Shape the discipline – contribute directly to detection strategies, playbooks, processes and tooling.
• Work at the intersection of AI and cybersecurity – gain hands-on exposure to one of the fastest-developing areas of security.
• Global impact – help protect AI-powered applications and workloads used across a large international organisation.
• Collaborative environment – work alongside security engineers, threat hunters, incident responders and AI specialists.
• Continuous learning – stay close to emerging AI technologies and novel attack techniques.

‍

‍

Team & Working Environment

You will join a small, international team focused on building and expanding AI security capabilities.

The environment is highly collaborative and suited to someone who enjoys investigation, experimentation and solving problems where there is no established playbook yet.

This is an individual contributor position; people management responsibilities are not expected at this stage.

‍

‍

Employment Details

• Employment type: Permanent
• Working model: Hybrid
• Working hours: 09:00–18:00
• Location: Romania
• Language: English
• On-call: No formal on-call model is currently established. Larger security incidents are handled in collaboration with the wider cybersecurity organisation.
• Interview process: 3 stages

‍

‍

Benefits

• Annual performance bonus
• Flexible benefits platform, including:
  
  • Meal vouchers
  • Cultural and holiday vouchers
  • Gift vouchers
  • Premium medical subscription
  • Private pension – Pillar III
• Life insurance
• Additional days off beyond the statutory minimum
• Flexible working hours
• Hybrid working model
• Work-from-abroad opportunities
• Employee share programme
• Employee Assistance Programme for employees and their families
• Access to professional development and learning platforms
• Discounts and preferential rates for various services
• Wellbeing initiatives and sports activities
• ESG and community initiatives

‍

‍

‍

‍

Only eligible candidates will be selected for an interview. Your personal data stays confidential.