(Junior / Mid) AI Security Analyst, Vulcan

AIFT is a leading firm specializing in innovative solutions to help businesses protect their digital assets. We leverage cutting-edge technologies, including artificial intelligence, to deliver comprehensive security assessments and remediation strategies. Vulcan is a groundbreaking product developed by AIFT. 

If you are passionate about making a unique impact, as well as securing the future for enterprises through delivering cybersecurity for GenAI - one of the most disruptive and fastest-growing technology trends, this is the role for you. 

Know more about how we deliver transformation at: https://vulcanlab.ai/   

This is your chance to work at the frontier of AI safety and security, testing the AI applications and systems that enterprises are deploying right now. As an AI Security Analyst at Vulcan, you’ll help shape how we deliver AI security engagements, from red teaming and offensive testing to safety evaluations and client advisory. 

You’ll work alongside AI security researchers, engineers and engagement consultants, and work closely with clients from kickoff to closing: clarifying requirements, coordinating delivery, and supporting onboarding and beyond. You’ll analyse clients’ GenAI use cases, run Vulcan assessments on live systems, and turn the findings into clear executive insights. Along the way, you’ll see first-hand how AI security research is done and how offensive security is evolving. 

You’ll join one of Asia’s leading AI security firms, with the room to find your place and contribute to work that makes a real difference. You’ll build a foundation that lasts, in AI, cybersecurity and beyond: managing complex projects, communicating clearly with stakeholders, and turning findings into action.  

As an AI Security Analyst, you’ll work on client engagements across a range of AI safety and security areas, including but not limited to: 

• Break AI before attackers do: running red teaming, safety and security assessments on AI applications, AI systems and agentic AI. 
• Comfortable with new tools and AI: You'll use Vulcan's own tools, find and adopt other tools when the job needs them, and use AI to work faster and smarter.
• Understanding how clients use AI: learning how enterprises use generative AI and identifying the risks that come with it.
• Analysing and reporting results: separating real issues from noise, and drafting clear reports that both technical teams and senior leaders can act on.
• Managing client projects: clarifying what clients need, work with partnership on coordinating projects from start to finish, and being a trusted contact for clients in your region.
• AI governance and frameworks: using recognised AI security and governance frameworks, such as those from OWASP, NIST and MITRE, and keeping up with AI regulations in your region.
• Stay ahead of AI threats: keeping track of the new risks AI brings to businesses as adoption grows and new attack technique emerge.
• Helping the team improve: sharing what you learn on each project so our testing gets sharper over time. 

• 0–2 years in cybersecurity, AI or machine learning, or a related degree.
• Basic understanding of how LLM applications work and fail, such as prompt injection and jailbreaks.
• Familiar with using AI tools in day-to-day work, for research, analysis, coding and writing.
• Familiarity with the OWASP Top 10 for LLM Applications, NIST AI RMF and MITRE ATLAS.
• Python literacy: you can run and debug a tool, not just launch it.
• Methodical evidence and documentation discipline.
• Clear written and spoken communication, and confidence presenting to client stakeholders.
• Sound judgement on when to stop and escalate.
• Technical curiosity: you learn fast and are comfortable with unfamiliar systems.
• Fluent English and the main business language of your market.

• Hands-on experience with AI red teaming, CTFs or security testing tools.
• Entry-level security certifications (e.g. Security+, eJPT) or AI security coursework.
• Knowledge of AI trend and regulations in your market.
• Client-facing or consulting experience.
• GCC roles: Arabic, for multilingual and cultural testing, and the ability to deliver in country. 

• Engagements delivered on time, with clean escalations.
• Deliverables pass review with minimal rework.
• Clients in your market rate deliverables, communication and responsiveness highly.
• Every gap, novel finding and architecture pattern fed back to the team, not absorbed. 

• Innovative Environment: Be part of a company at the forefront of technology to provide security in GenAI, with opportunities to work on groundbreaking projects. 
• Growth Opportunities: Take your career to new heights with our career development programs and growth-focused culture. 
• Dynamic Team: Join a multi-cultural and dynamic team of dedicated professionals who inspire and support each other. 
• Compensation: Competitive salary and benefits package, commensurate with experience and performance. 

• If you're ready to embark on this exciting journey and contribute to shaping the future of GenAI security, please submit your resume outlining your relevant experience and motivation for applying.