• Support maintenance of HITRUST, HIPAA, and SOC 2 compliance tasks under CTO guidance • Help draft and update internal policies and security documentation • Conduct annual risk assessments and evidence gathering for third-party audits • Monitor security practices and incidents, and drive mitigation efforts • Execute employee onboarding and offboarding checklists (system access, device setup, deprovisioning) • Manage internal tools, access controls, device management, and vendor reviews • Support device management and assist with vendor review documentation • Help maintain GCP infrastructure compliance documentation alongside the CTO • Support incident response and change management procedures

Role Description As a key player in the Eurofins network, we oversee multiple European businesses in Clinical testing area. With a vast network spanning over 350 sites in Europe, we are committed to maintaining robust IT security measures in alignment with business requirements. - Approvals: Act as a gatekeeper for sensitive access and firewall rule approvals, ensuring compliance with security policies and business needs. - Reviews: Conduct regular reviews of access permissions, firewall configurations, and IT infrastructure settings (e.g., AD, Intune, Office 365, Azure) to ensure adherence to security best practices and expectations. - Architectural Review and Change Management: Review and approve all proposed changes to the IT infrastructure, ensuring changes do not compromise security integrity. - Testing: Conduct vulnerability scans at both regional and laboratory levels, overseeing remediation efforts. Collaborate with Group Security to facilitate penetration testing as required. - Incident Response: Assist in the investigation of security breaches and provide support for security intelligence reported by the Group Security Operations Center (SOC). - Advisory Role: Work closely with newly acquired laboratories to enhance their security posture, leveraging internal security standards and the expertise of a Senior Security Analyst. Evaluate the security of both in-house and externally developed applications, providing recommendations for security enhancements. - Reporting: Contribute to the development of operational security Key Performance Indicators (KPIs) and offer recommendations for improvement based on data analysis and industry best practices. - Vulnerability Management: Oversee the vulnerability management process for our entire infrastructure, ensuring timely identification, prioritization, and mitigation of vulnerabilities. Qualifications - Bachelor's degree in Computer Science, Information Security, or related field. - Minimum of 3-5 years of experience in information security roles, with a focus on vulnerability management, incident response, and security advisory. - Professional certifications such as ISO27001 (lead implementer or auditor) are preferred. - Other certifications such as CISSP, CEH, or CISM are a plus. - Strong knowledge of IT security principles, technologies, and best practices. - Experience with security tools and technologies (e.g., vulnerability scanning tools, SIEM solutions). - Excellent communication skills, with the ability to convey technical information to both technical and non-technical audiences. - Effective English speaking and writing is mandatory. - Additional spoken languages would be a plus, especially French or Spanish. - Strong analytical and problem-solving abilities, with a keen attention to detail. - Ability to work effectively in a fast-paced, dynamic environment with multiple stakeholders. Benefits - We support your development! - Do you feel you don’t match 100% of the requirements? Don’t hesitate to apply anyway! Eurofins companies are committed to supporting your career development. - We embrace diversity! - As an Equal Opportunity Employer, the Eurofins network of companies believes in strength and innovation through diversity. - Sustainability matters to us! - We are well on our way to achieving our objective of carbon neutrality by 2025, through a combination of emission reduction and compensation initiatives. Compensation RON 8500 - RON 10500 monthly

• Monitor enterprise AI usage end to end • Hunt for unauthorized AI and rogue agent activity • Turn raw AI telemetry into triaged findings • Collaborate with Automation Engineers, Data Analysts, and Directors • Contribute to evidence base for ISO 42001 certification • Maintain and validate AI activity logging and data retention controls

Role Description We are building an AI Security and Governance capability and need an AI Security Analyst to be the front line for detecting, investigating, and containing risk across every AI tool, agent, and model touching AlphaSense's environment. You will monitor enterprise AI usage end to end, hunt for unauthorized ("shadow") AI and rogue agent activity, and turn raw AI telemetry into triaged findings the security and governance team can act on. Working alongside the Automation Engineer, Data Analyst, and Director, you will be a primary contributor to the evidence base underpinning our ISO 42001 certification and our broader AI risk posture. Key Responsibilities - AI Tool Discovery & Shadow AI Monitoring: Continuously monitor CASB/SWG, OAuth, and endpoint telemetry to discover unsanctioned AI tools, browser extensions, and API-level agents in use across the business. Classify findings by risk tier and escalate unauthorized deployments for containment. - Rogue Agent Detection & Investigation: Investigate alerts related to autonomous agents and AI-powered workflows (e.g., anomalous tool chains, unexpected data access, credential misuse) including threats such as OpenClaw and similar agent-based attack patterns. Document findings and drive remediation with the Automation Engineer and Identity teams. - AI Data Exfiltration Detection & DLP: Monitor DLP and AI usage logs for signs of sensitive data leaving the environment through AI tools (prompts, uploads, plugins, MCP connectors). Tune detection rules and validate that AI-specific DLP controls are operating as designed. - Developer AI Tool Governance: Monitor usage of developer-facing AI tools (GitHub Copilot, Claude Code, Codex, and similar) for policy compliance, credential exposure, and non-human identity risk. Partner with Engineering to ensure code-assist and agentic dev tools operate within approved guardrails. - AI Logging, Retention & Audit Support: Maintain and validate AI activity logging and data retention controls to ensure auditability. Assemble and organize evidence supporting ISO 42001 audits, EU AI Act readiness, and internal AI impact assessments. - Detection Tuning & Continuous Improvement: Analyze false positive/negative trends across AI security detections and recommend threshold and logic adjustments. Feed recurring patterns into the Automation Engineer's playbook backlog. - Cross-functional Collaboration: Partner with Security Operations, Identity, Legal, and AI/ML Engineering to align findings with existing incident response processes, and support the Director in preparing risk findings for governance council and executive reporting. Qualifications - 3-5+ years in security analysis, SOC, or GRC analyst roles - Working knowledge of SIEM platforms (Splunk, Microsoft Sentinel, Google Chronicle) and DLP/CASB tooling - Understanding of AI/LLM risk concepts: prompt injection, data exfiltration via AI tools, model/agent misuse, shadow AI - Familiarity with non-human identity concepts (service accounts, API keys, OAuth tokens) and their security challenges - Understanding of threat detection logic (MITRE ATT&CK exposure to MITRE ATLAS or OWASP LLM Top 10 a plus) - Comfortable reading and interpreting logs, API telemetry, and structured/unstructured investigation data - Basic scripting or query proficiency (Python, SQL, or SPL/KQL) for investigation and reporting - Strong written documentation habits - Ability to translate technical findings into clear, risk-based narratives - Familiarity with cloud environments (AWS, Azure, or GCP) Requirements - Exposure to AI governance frameworks (ISO 42001, NIST AI RMF, EU AI Act risk tiers) - Experience supporting audit evidence collection or control testing (SOC 2, ISO, or similar) - Familiarity with agentic AI frameworks (LangChain, AutoGen, CrewAI) and MCP-based tool-use architectures - Experience with browser extension monitoring or OAuth application audits - Exposure to ML-based anomaly detection or NLP-driven log analysis Certifications - Security+, CISSP (Associate), or AI-specific credentials Company Description AlphaSense is an equal-opportunity employer. We are committed to a work environment that supports, inspires, and respects all individuals. All employees share in the responsibility for fulfilling AlphaSense’s commitment to equal employment opportunity. AlphaSense does not discriminate against any employee or applicant on the basis of race, color, sex (including pregnancy), national origin, age, religion, marital status, sexual orientation, gender identity, gender expression, military or veteran status, disability, or any other non-merit factor. This policy applies to every aspect of employment at AlphaSense, including recruitment, hiring, training, advancement, and termination. In addition, it is the policy of AlphaSense to provide reasonable accommodation to qualified employees who have protected disabilities to the extent required by applicable laws, regulations, and ordinances where a particular employee works.