Cybersecurity Analyst (Security and AI Governance)

Company Overview

Cogent Communications is a global Tier 1 facilities-based ISP and is regularly listed among the top five networks worldwide. The company is publicly traded on NASDAQ under the ticker CCOI. It provides businesses with high-speed internet access and Ethernet transport services through a large, all-optical IP backbone with end-to-end service delivery and network monitoring. This infrastructure supports high-capacity IP services worldwide at competitive pricing.

Role Summary

The Cybersecurity Analyst for Security and AI Governance is responsible for safeguarding the organization’s information assets, infrastructure, applications, cloud platforms, data, and AI-driven initiatives against cyber threats and misuse. The role contributes to both cybersecurity operations and AI governance by detecting, evaluating, tracking, and reducing risks across information systems and AI-enabled technologies.

This position partners with IT, software development, business teams, external vendors, and the CIO/CISO functions to ensure security and AI activities remain aligned with internal policy, industry expectations, regulatory obligations, and evolving AI governance frameworks. It also supports Shadow AI oversight, enterprise risk management, and ongoing improvement efforts.

Compensation

The starting base salary range for this role is $100,000 to $120,000 per year. Final pay within that range depends on factors such as experience, education, skills, certifications, and business needs.

Benefits

The company offers a competitive base salary and a comprehensive benefits package that includes health, dental, and vision coverage, paid time off, short- and long-term disability, life insurance, holidays, parental leave, a 401(k) plan with employer match, stock options, and an employee assistance program. Most benefits begin within 30 days of employment, while some are subject to a waiting period.

Key Responsibilities

• Keep watch over security tools, networks, applications, cloud services, and AI-enabled platforms for unusual or suspicious activity.
• Review alerts, investigate incidents, identify root causes, and recommend remediation steps.
• Contribute to incident response work, including containment, eradication, recovery, and post-incident review.
• Carry out vulnerability assessments and coordinate fixes with both technical and business stakeholders.
• Examine logs from firewalls, IDS/IPS, endpoint protection, cloud systems, identity providers, AI platforms, and other security controls.
• Assess security posture and risk across systems, applications, AI solutions, and business processes.
• Help create, implement, and improve cybersecurity and AI governance policies, standards, procedures, and controls.
• Work with IT, engineering, and business teams to embed security-by-design practices and secure technology solutions.
• Support reviews and governance oversight of internally built AI solutions, machine learning models, and employee-led AI initiatives.
• Evaluate AI vendors, applications, and services for security, privacy, compliance, data protection, and operational exposure.
• Track risks linked to generative AI, LLMs, machine learning platforms, prompt injection, data leakage, insecure APIs, and AI supply chain issues.
• Assist in operating the AI governance program and Shadow AI oversight program.
• Support secure development practices for internal applications, AI-enabled products, and new technology initiatives.
• Maintain and improve security tools so they remain effective and performant.
• Contribute to employee security and AI awareness training.
• Support audits, compliance checks, AI governance reviews, and regulatory reporting.
• Research emerging threats, vulnerabilities, trends, AI technologies, and industry practices, then recommend mitigations.
• Maintain inventories of approved AI solutions, AI vendors, and AI-related initiatives.
• Prepare reports, dashboards, metrics, risk assessments, and documentation for cybersecurity, AI governance, compliance, and enterprise risk management.

Requirements

• Associate’s or bachelor’s degree in cybersecurity, computer science, information systems, data science, or a related field.
• 2 to 5 years of experience in cybersecurity, information security, application security, cloud security, software development, or a similar technical role.
• Practical experience with security monitoring, incident response, vulnerability management, risk assessment, and security control implementation.
• Working familiarity with generative AI, machine learning, large language models, or AI-enabled business applications.
• Strong hands-on information security capability.
• Ability to work independently on assigned projects.
• Excellent communication, presentation, and organizational skills.
• Strong analytical thinking and problem-solving ability.
• Knowledge of cybersecurity frameworks and standards such as CIS Controls and the NIST Cybersecurity Framework.
• Understanding of AI governance principles and emerging AI risk management approaches.
• Working knowledge of network security, endpoint protection, identity and access management, threat detection, and cloud security.
• Understanding of application security, API security, and secure software development practices.
• Awareness of risks tied to generative AI platforms, LLMs, prompt injection, privacy, and model security.
• Ability to work both independently and collaboratively in a fast-moving environment.
• Capability to produce formal documentation, risk assessments, and executive-level reports.
• Preferred: SIEM and security monitoring tool experience.
• Preferred: Experience with Azure, AWS, or Google Cloud.
• Preferred: Scripting or automation experience using Python or PowerShell.
• Preferred: Exposure to software development, DevSecOps, or application security initiatives.
• Preferred certifications include CISSP, CEH, CompTIA Security+, GSEC, or related AI security, cloud security, application security, or governance credentials.
• Physical requirements: primarily seated work throughout the day, frequent computer use and screen viewing, and rare lifting/carrying/pushing/pulling of items up to 50 pounds.
• This role is an in-office position.
• Applicants should submit a resume and cover letter to the employer’s careers email address.
• Candidates only; recruiters are not invited to apply.

Additional Information

This job description is intended to describe the general nature and level of work performed and should not be treated as a complete list of all duties, responsibilities, or qualifications. The employer is an Equal Opportunity Employer.