AI Investigations & Enforcement Analyst

About Vanguard
Founded in 1975, Vanguard is one of the world's leading investment management companies. The firm offers investments, advice, and retirement services to tens of millions of individual investors around the globe-directly, through workplace plans, and through financial intermediaries.

Vanguard India

Vanguard's office in India is a significant milestone in our global expansion. We are committed to establishing an enduring technology center in Hyderabad, Telangana and are excited to be adding talent who will focus on Artificial Intelligence (AI), mobile, and cloud-based technologies that drive our business outcomes and deliver a world-class experience for our clients.

Role Summary

We are seeking an experienced security practitioner responsible for investigating AI-related security events and executing approved enforcement actions across enterprise AI use cases. This role supports a 24/7 operational security function and combines hands-on threat investigation, policy validation, evidence collection, and control tuning to reduce risk while enabling secure adoption of AI technologies.

Responsibilites
T riage and investigate alerts involving enterprise AI applications, LLMs, AI agents, plugins, skills, browser extensions, local IDE tooling, agent-to-agent traffic, and SaaS/PaaS attack surfaces.

• Correlate telemetry from endpoint, network, cloud, SaaS/PaaS, identity, AI gateway, and application controls to determine scope, cause, and potential impact.
• Execute documented enforcement actions such as blocking prohibited AI destinations or tools, restricting risky agent capabilities, escalating compromised identities, and recommending policy changes.
• Validate detections and enforcement policies through controlled sandbox and adversarial testing, including prompt injection, impersonation, data leakage, unsafe tool use, and unauthorized model or agent access.
• Maintain investigation of records, evidence, indicators, case timelines, and remediation actions in accordance with security operations procedures.
• Partner with SOC, incident response, identity, endpoint, network, cloud, application security, and AI platform teams to resolve AI security findings.
• Identify recurring investigation patterns and recommend detection logic, runbook, dashboard, or policy improvements.
  
  Qualifications and Skills
• Minimum 5 years of experience in cyber threat detection, incident response, or security operations with exposure to real-time threat analysis and response strategies.
• Bachelor's degree (B.E./B.Tech) in Computer Science, Cybersecurity, Information Technology or a related discipline, or a Master's degree/Diploma in Cybersecurity or Network Security.
• cybersecurity, security operations, incident response, threat analysis, application security, cloud security, or a related discipline, including hands-on experience investigating or securing workloads in public cloud environments.

• Working knowledge of LLM and agent security concepts, including prompt injection, sensitive data exposure, excessive agency, tool abuse, insecure plugins, and machine/non-human identity risk.

• Knowledge of AI supply chain and security posture management concepts, including MCP servers, agent skills, plugins, model and prompt artifacts, AI-generated code, and other AI artifacts.

• Hands-on ability to analyze logs, alerts, HTTP/API traffic, endpoint telemetry, authentication activity, and network events.

• Experience with security technologies such as SIEM, EDR, SSE/SWG, API security, cloud security, identity controls, or AI gateways.

• Ability to document investigations clearly and communicate technical findings to engineering and security partners.

The Vanguard Group is one of the world’s largest investment companies, advising clients and the general public on savings, investment, retirement, personal finance, the economy, and much more.