Senior Security Analyst

Senior Security Analyst – AI & Application Security

Location: India (Remote)
Employment: Full-Time
Role Overview: Join InnoveusIT’s Information Security & Compliance team as a Senior Security Analyst – AI & Application Security. This hands-on, high-impact role focuses on strengthening application security, AI governance, and cloud security for enterprise SaaS environments in Energy, Utilities, and Asset-Intensive industries. You’ll collaborate with IT, DevOps, and compliance teams to embed security best practices across engineering and operations.

Key Responsibilities:

• Application Security: Lead SAST, DAST, and SCA testing; coordinate third-party penetration tests; manage vulnerability remediation workflows using Qualys and centralized platforms like DefectDojo.
• Security Operations: Optimize CrowdStrike Next-Gen SIEM for threat detection; conduct threat hunting and incident response; develop detection rules and playbooks.
• AI Tool Governance: Maintain AI tool inventories, evaluate vendor security postures (UpGuard), and ensure compliance with SOC 2 Type II and ISO/IEC 42001 frameworks.
• Program Maturity: Drive vulnerability management improvements, align with NIST CSF 2.0, and support SOC 2/ISO 27001 audits.

• 5+ years in Security Analyst roles with expertise in AppSec, SOC, and AI security.
• Proficient in CrowdStrike (Next-Gen SIEM, CSPM, Threat Intelligence) and Rapid7; AWS/Azure cloud security.
• CI/CD pipeline hardening, SAST/DAST/SCA integration, and penetration test coordination.
• NIST CSF 2.0, SOC 2 Type II, and ISO 27001 knowledge.
• Certifications (CISSP, OSCP, AWS Security Specialty, AAISPM) preferred.