> Markdown version of [/jobs/ext/3081982-ai-and-cloud-security-analyst](https://www.wearedevelopers.com/jobs/ext/3081982-ai-and-cloud-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Ai And Cloud Security Analyst

- **Company:** Jobrapido
- **Location:** Barcelona, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Software as a Service, Cloud Computing Security, Cyber Security, Information Leak Prevention, Python (Programming Language), Open Web Application Security, Windows PowerShell, Kusto Query Language, SQL Databases, Google Cloud, Large Language Models, Mttr, Data Analytics, Low-code, CIS Benchmarks
- **Published:** September 26, 2026
- **Apply:** https://www.buscojobs.com.es/ai-and-cloud-security-analyst-en-barcelona-ID-372961511

## About the Role

technical and executive audiencesFoundational AI/GenAI security awareness (prompt injections, jailbreaks, data leakage); familiarity with OWASP LLM Top 10 and MITRE ATLASWorking knowledge of one-cloud security (Azure/AWS/GCP) with CSPM/CWPP concepts and cloud identity basicsScripting for automation (PowerShell and/or Python)Familiarity with CIS Benchmarks and NIST *******, CSF); awareness of NIST AI RMF and EU AI Act beneficial for EU candidatesAnalytical rigor, attention to detail, clear English communication across global teamsAnalytical mindsetEffective communication across time zonesCollaborative team playerKQL and/or SQL for data queryingPowerShell and/or Python scriptingExperience with AI/GenAI security concepts (prompt injection, jailbreaks, data leakage)

## Description

OverviewAs AI and Cloud Security Analyst, you provide day-to-day L2 coverage of the AI security detection fabric, triaging and supporting investigations across runtime defense, behavioral monitoring, model security, and adversarial testing.You translate telemetry into actionable OCR reports for leadership and auditors, and monitor cloud security posture across Azure, AWS, and GCP.You work with a small team to refine detections, runbooks, and enforcement, while assisting with compliance evidence and EU AI Act considerations.This role combines security operations, data analytics, and cross-functional collaboration to reduce AI and cloud risk.Compensaciones / Beneficiosremote workflexible hourscareer development programsLife Empowerment Assistance Programdiversity, equity & inclusionglobal onboarding programResponsabilidadesL2 coverage of the AI Security toolset and detections across runtime defense, intent/behavioral anomalies, model-level alerts, and adversarial signalsInvestigate AI-specific events across five archetypes (embedded SaaS copilots, low-code/no-code agents, homegrown pipelines, device agents, homegrown models) and header indicators (prompt injection, data leakage, RAG poisoning)Maintain agent inventory hygiene and risk-scoring context to support runtime enforcement and fast-track approvalsQuery and correlate telemetry (KQL/SQL), build dashboards, track metrics like detection volumes, containment rates, MTTD/MTTR, and policy-violation trendsProduce recurring OCR dashboards and executive summaries; support NIST AI RMF evidence and EU AI Act-related evidenceDocument cases rigorously and contribute to rule tuning, runbook refinement, and closed-loop improvementsDevelop fluency in OWASP Top 10 for LLM and Agentic Applications and MITRE ATLAS as investigation taxonomyMonitor cloud security alerts across CSPM for Azure, AWS, and GCP; route/remediate/escalate per playbookSupport cloud compliance monitoring against CIS Benchmarks and NIST ****** r5/CSF 2.0; assist with policy updatesAssist with cloud workload vulnerability triage and security-signal reviews for Microsoft 365 / Google WorkspaceCollaborate with L3 engineer, SOC, cloud teams, and incident responders for investigations and enrichment spanning cloud, identity, endpoint, and AI telemetryRequisitos principalesSolid security operations fundamentals: alerting, triage, validation, incident classification, escalation, case managementStrong data analytics and reporting using KQL/SQL; dashboard/report development for technical and executive audiencesFoundational AI/GenAI security awareness (prompt injections, jailbreaks, data leakage); familiarity with OWASP LLM Top 10 and MITRE ATLASWorking knowledge of one-cloud security (Azure/AWS/GCP) with CSPM/CWPP concepts and cloud identity basicsScripting for automation (PowerShell and/or Python)Familiarity with CIS Benchmarks and NIST *******, CSF); awareness of NIST AI RMF and EU AI Act beneficial for EU candidatesAnalytical rigor, attention to detail, clear English communication across global teamsAnalytical mindsetEffective communication across time zonesCollaborative team playerKQL and/or SQL for data queryingPowerShell and/or Python scriptingExperience with AI/GenAI security concepts (prompt injection, jailbreaks, data leakage)


## Related Videos

- [The Cloud is Calling: Answer with In-Demand Skills](https://www.wearedevelopers.com/videos/945-the-cloud-is-calling-answer-with-in-demand-skills)
- [Reimagining app development with Low-code and AI](https://www.wearedevelopers.com/videos/1651-reimagining-app-development-with-low-code-and-ai)
- [What Developers Get Wrong About Application Quality](https://www.wearedevelopers.com/videos/233-what-developers-get-wrong-about-application-quality)
- [Agentic AI - From Theory to Practice: Developing Multi-Agent AI Systems on Azure](https://www.wearedevelopers.com/videos/1532-agentic-ai-from-theory-to-practice-developing-multi-agent-ai-systems-on-azure)
- [Cloud Run- the rise of serverless and containerization](https://www.wearedevelopers.com/videos/106-cloud-run-the-rise-of-serverless-and-containerization)
- [What If Apps Built Themselves? AI-Powered Low-Code for the Industrial Enterprise](https://www.wearedevelopers.com/videos/2079-what-if-apps-built-themselves-ai-powered-low-code-for-the-industrial-enterprise)

## Related Articles

- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Got AI ideas but no money? Here are 10 free ways to level up your AI skills with Google Cloud](https://www.wearedevelopers.com/magazine/600-got-ai-ideas-but-no-money-here-are-10-free-ways-to-level-up-your-ai-skills-with-google-cloud)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [7 Cloud Computing Trends Coming in 2025 for Developers](https://www.wearedevelopers.com/magazine/412-7-cloud-computing-trends-coming-in-2025-for-developers)
- [Dev Digest 132 - Binging WADFlix?](https://www.wearedevelopers.com/magazine/473-dev-digest-132-binging-wadflix)