Cybersecurity Analyst (Security and AI Governance)

Company Overview

Cogent Communications is a Tier 1 global ISP with one of the largest, highest capacity all-optical IP networks worldwide, publicly traded under ticker CCOI. It provides businesses high-speed internet and Ethernet transport with competitive bandwidth pricing and end-to-end network control ensuring superior support.

Employees enjoy a competitive salary with comprehensive benefits including health, dental, vision insurance, paid time off, disability coverage, life insurance, parental leave, 401(k) with employer match, stock options, and employee assistance programs. Most benefits begin within 30 days of employment though some have waiting periods.

Job Summary

The Cybersecurity Analyst focused on Security and AI Governance will safeguard the organization's information systems, networks, cloud resources, applications, data, and AI initiatives against cyber threats and misuse. This role collaborates with IT, software development, business teams, and external partners to align cybersecurity and emerging AI governance initiatives with policies, regulations, and industry frameworks. The analyst will work closely with CIO and CISO leadership ensuring a unified approach to risk management, Shadow AI oversight, and continual security enhancements.

Key Responsibilities

• Monitor various security systems, applications, cloud platforms, and AI-enabled services for anomalies and threats.
• Investigate security alerts and incidents to identify root causes and apply remediation actions.
• Support all incident response stages including containment, eradication, recovery, and post-incident reviews.
• Perform vulnerability evaluations and coordinate mitigation with technical and business stakeholders.
• Analyze security logs from firewalls, IDS/IPS, endpoint platforms, cloud and AI systems, and identity services.
• Conduct comprehensive security assessments and risk analyses for systems, apps, AI tools, and processes.
• Assist with developing, implementing, and enhancing cybersecurity and AI governance policies, standards, and controls.
• Collaborate with cross-functional teams to embed security-by-design principles and best practices.
• Oversee review, risk assessment, and governance of internally developed AI solutions and employee AI projects.
• Evaluate third-party AI offerings and services for cybersecurity, privacy, compliance, and operational risks.
• Identify and assess risks relating to generative AI, LLMs, prompt injection attacks, data leakage, insecure APIs, and AI supply chain vulnerabilities.
• Help maintain AI governance programs and Shadow AI oversight.
• Support secure development practices for AI-enabled and software applications and emerging technologies.
• Maintain and optimize security tools to ensure effectiveness.
• Participate in security and AI awareness training initiatives for employees.
• Assist with audits, compliance reviews, AI governance assessments, and regulatory reporting.
• Research the latest cybersecurity threats, vulnerabilities, AI technologies, and best practices and recommend mitigations.
• Maintain inventories of approved AI solutions, vendors, and initiatives.
• Create and manage reports, dashboards, risk assessments, and documentation related to cybersecurity operations, AI governance, and enterprise risk management.

Qualifications

• Associate's or Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Data Science, or related fields.
• At least 2 to 5 years of experience in cybersecurity, information security, application security, cloud security, or related technical fields.
• Experience with security monitoring, incident response, vulnerability management, risk assessment, and control implementation.
• Knowledge of generative AI, machine learning concepts, LLMs, or AI business applications.
• Strong hands-on information security skills and independent project management capability.
• Excellent communication, presentation, organizational, analytical and problem-solving skills.

Technical Expertise

• Familiarity with cybersecurity frameworks such as CIS Controls, NIST Cybersecurity Framework, and security best practices.
• Understanding of AI governance principles and emerging AI risk frameworks.
• Knowledge of network security, endpoint protection, identity and access management, threat detection, and cloud security.
• Application security concepts, API security, and secure software development methodologies.
• Insight into generative AI risks including data privacy, prompt injection, and AI model security.
• Ability to produce formal documentation, risk reports, and executive-level presentations.
• Experience with SIEM tools and security monitoring platforms is advantageous.
• Exposure to cloud platforms such as Azure, AWS, or Google Cloud is a plus.
• Familiarity with scripting or automation using Python or PowerShell is beneficial.
• Support experience in DevSecOps, application security, or software development is favorable.

Preferred Certifications

• CISSP (Certified Information Systems Security Professional).
• CEH (Certified Ethical Hacker).
• CompTIA Security+.
• GIAC Security Essentials (GSEC).
• Certifications related to AI security, cloud security, application security, or governance are highly valued.

Physical Requirements

• Ability to remain seated and stationary for most of the workday.
• Frequent computer and desk-based tasks requiring continuous screen viewing.
• Rarely lifting, carrying, or moving objects weighing up to 50 pounds.

Additional Information

This job description summarizes typical duties and qualifications but is not exhaustive of all responsibilities or requirements. This is an in-office role based in Herndon, VA. Only candidates should apply; recruiters are not requested.

Cogent Communications is an Equal Opportunity Employer offering a starting salary range from $100,000 to $120,000 annually, with exact compensation based on experience, education, skills, and business needs.