AI Security Analyst
It's a new day with a new opportunity at 8am!Β
About the role:
The AI Security Analyst is a hybrid role combining security operations monitoring with AI-specific risk management and governance support. The role focuses on identifying, assessing, and mitigating risks associated with AI use, particularly generative AI, LLMs, and agentic systems, across internal tools and customer-facing platforms, while contributing to traditional security monitoring. The role does not involve building or training AI models; it secures how AI is deployed, governed, monitored, and used.
Location: Czech Republic (Remote). Working hours for this role are aligned to U.S. Central Time (Austin) core business hours to ensure real-time collaboration with the U.S.-based security leadership and compliance team.
This role is hired through an Employer of Record (EOR) partner in the Czech Republic.
About us:
8am builds software that helps professionals run stronger businesses. Our platform powers payments, client experience, and operational workflows for legal, accounting, and other service-based businesses. U.S. based professionals count on our purpose-built solutions to simplify operations, ensure compliance, and fuel profitable growth, so they can focus on their clients and do more of the work that matters.
More than 250,000 professionals across the U.S. rely on our products every day. As we continue to grow, weβre investing in the next generation of our platform and are looking for experienced engineers who want to help shape its future.
What you'll do:
- AI security and risk management: Identify and mitigate AI-specific threats: prompt injection, jailbreaking and adversarial inputs, sensitive information disclosure, insecure output handling and excessive agency, model misuse and overreliance, and supply chain vulnerabilities in third-party AI services and models.
- AI use-case review: Triage and risk-assess proposed AI use cases with Engineering, Product, Legal, and Privacy before production deployment; recommend controls and document decisions.
- Agentic governance support: Support the operation of the company's agentic-work governance model: autonomy classification reviews, agent activity monitoring, and evidence collection for governance reviews.
- Vendor and model review: Evaluate third-party AI vendors, model providers, and AI-enabled features for security posture and data handling; maintain the approved-provider view.
- Security operations and monitoring: Perform SOC-style monitoring, alert triage, and investigation across cloud, application, and AI-enabled systems, including AI API usage and data flows; enhance detection rules and logging for AI-specific activity.
- Compliance and governance support: Support audit readiness for SOC 2 and PCI DSS and alignment with emerging AI frameworks (NIST AI RMF, OWASP LLM Top 10, ISO/IEC 42001 as the program matures); document AI security controls and risk assessments.
- Incident support: Support AI-related incident response, investigation, and post-incident analysis.
About you:
- 3+ years in security operations, security analysis, or GRC with hands-on technical exposure.
- Working understanding of LLM-specific threat classes (OWASP LLM Top 10) and AI risk frameworks (NIST AI RMF).
- Ability to read logs, write basic queries and scripts, and investigate independently.
- Strong written English and documentation discipline; comfortable in a distributed team.
- Demonstrated experience leveraging AI tools and technologies to improve workflows, enhance decision-making, or drive innovation.
- This position is preferably based in Brno, Czech Republic
Bonus points:
- Experience monitoring or governing agentic AI systems, MCP integrations, or AI developer tooling.
- Fintech, legal-tech, or other regulated-industry background.
Additional Information
The monthly gross salary range for this position is CZK 75,000 to CZK 140,000. 8am is committed to fair, objective, and non-discriminatory com