Senior Insider Risk & AI Security Analyst/ Engineer IV

About the role

The Digital Insider Risk (DInR) Department protects The Jones Financial Companies, and its subsidiaries (collectively, "the Firm") against risk stemming from user digital activity. The Digital Insider Risk and Data Loss Prevention (DLP) Analyst will be responsible for monitoring, analyzing, investigating and reporting of User Behavior Analytics and Data Loss Prevention alerts across various tools, ensuring the protection of client and Firm data.

Responsibilities

• Monitor and investigate user activity involving AI-enabled tools (e.g., generative AI platforms, AI copilots, internal ML systems) to identify potential data leakage, policy violations, or misuse.
• Develop and maintain AI observability use cases to increase visibility into how AI systems are accessed, used, and abused across the Firm.
• Assess AI telemetry, logs, and metadata to understand data flows, user behavior patterns, and abnormal or risky AI usage.
• Partner with engineering and platform teams to define logging, monitoring, and alerting requirements for AI systems.
• Support AI governance initiatives by mapping observed AI usage to Firm policies, data classification standards, and insider risk indicators.
• Monitor, triage, investigate, and escalate UEBA and DLP alerts from multiple systems (e.g., Gurucul, XSOAR, Microsoft Purview, Proofpoint, Zscaler).
• Lead high-priority incident response activities related to insider risk and critical data exfiltration events.
• Generate informed reporting around security events and metrics.
• Document investigations in adherence to all audit and legal requirements.
• Analyze incidents for patterns of data misuse or exfiltration across email, endpoints, cloud, and web.
• Provide mentorship and guidance to junior analysts, fostering a culture of continuous learning and professional development.

Requirements

• Minimum of 5 years in Information Systems Security or Information Technology with a focus on security controls and processes.
• Experience analyzing or monitoring AI, machine learning, or automation platforms from a security, risk, or governance perspective.
• Familiarity with generative AI concepts (e.g., prompt-based interactions, training vs. inference, data grounding, embeddings).
• Understanding of AI-related risk domains such as data leakage, hallucinations, model misuse, and insider-driven abuse.
• Experience working with telemetry, logs, or behavioral data from AI-enabled applications or cloud services.
• Ability to translate technical AI risks into clear, actionable insights for security leaders, risk partners, and business stakeholders.
• Possession of a recognized, advanced security certification.
• Proven ability to define and utilize UEBA models to detect complex, non-signature based risks.
• Experience triaging, investigating and assisting remediation of security alerts.
• Familiarity with various cybersecurity tools and how to leverage them effectively (e.g. SIEM, SOAR, UEBA, DLP).
• Strong technical understanding of security controls and data protection mechanisms within major cloud environments.
• Experience with operating and tracking investigations meticulously in a case management solution.
• Strong communication skills and the ability to effectively communicate with technical and non-technical businesses, vendors, associates, and leaders.

Qualifications

• Must be able to work in the office four days per week.

Skills

• Advanced knowledge of security controls and data protection mechanisms within major cloud environments.
• Experience with UEBA models and their application in detecting complex, non-signature based risks.
• Proficiency in monitoring and investigating security alerts from various systems.
• Ability to translate technical AI risks into clear, actionable insights for security leaders, risk partners, and business stakeholders.
• Strong communication skills and the ability to effectively communicate with technical and non-technical businesses, vendors, associates, and leaders.

Benefits

• Medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness)
• Short- and long-term disability, basic life, and basic AD&D coverage
• 401(k) retirement plan
• Tax-advantaged accounts: health savings account, and flexible spending account
• Comprehensive benefits package including paid holidays, vacation, sick time, personal days, and a paid day for volunteerism
• Bonuses and profit sharing opportunities
• Employee Assistance Program

Pay

Compensation provided for using, not obtaining, the rating.

Schedule

Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week.