AI & Cybersecurity Solutions Analyst

PRIMARY PURPOSE

CNA is hiring for the role of AI & Cybersecurity Solutions Analyst in the Chief Information Office (CIO). The CIO is responsible for supporting staff with all facets of CNA across a wide spectrum of information and technical activities. The CIO specializes in providing information services and resources, cyber security, document production services, and corporate desktop and information technology support.

The AI & Cybersecurity Solutions Analyst will play a critical role in the development, evaluation, and implementation of secure AI solutions at CNA. This position bridges technical AI development with cybersecurity requirements, ensuring that AI initiatives are designed with secure-by-design principles from inception through deployment. The analyst will work collaboratively with AI development teams, cybersecurity specialists, and business stakeholders to assess requirements, identify risks, prototype solutions, and contribute to the technical implementation of AI capabilities that meet both functional and security objectives.

CNA fosters an inclusive culture that values diverse backgrounds and perspectives. Our flexible and engaging work environment encourages iterative and creative collaboration at every stage of the problem solving process. Our employees are committed to helping clients develop effective solutions to better manage their programs through scientific, data-driven approaches. We are looking for creative and innovative individuals to help carry out our mission.

JOB DESCRIPTION AND / OR DUTIES

1. Collaborate with AI development teams to design, prototype, and test AI/ML solutions that address business requirements while adhering to security best practices.
2. Contribute to the technical implementation of AI models, automation workflows, and intelligent systems using appropriate frameworks and tools.
3. Conduct feasibility analyses for proposed AI initiatives, evaluating technical requirements, data needs, computational resources, and security implications.
4. Develop proof-of-concept solutions and technical demonstrations to validate AI approaches before full-scale implementation.
5. Perform security assessments of AI systems throughout the development lifecycle, identifying vulnerabilities related to data privacy, model security, adversarial attacks, and compliance requirements.
6. Work with cybersecurity teams to implement security controls, monitoring capabilities, and incident response procedures for AI solutions.
7. Evaluate third-party AI tools, platforms, and services for security posture, compliance with organizational standards, and integration requirements. Document security architectures, threat models, and risk assessments for AI implementations.
8. Analyze AI system performance, security metrics, and operational data to identify optimization opportunities and potential security concerns. Create and maintain technical documentation including system architectures, data flow diagrams, integration specifications, security controls, and standard operating procedures.
9. Research emerging AI technologies, security threats to AI systems, and industry best practices to inform strategic recommendations and responsible AI principles. Prepare technical reports, findings, and recommendations for leadership and stakeholder review.
10. Serve as a technical liaison between AI development teams, cybersecurity teams, and business units to ensure alignment on requirements and security standards.
11. Provide technical guidance and knowledge sharing to team members on AI capabilities, security considerations, and implementation best practices. Participate in project planning sessions, architecture reviews, and security assessments as the AI subject matter expert.
12. Perform other duties as assigned that support the development and secure deployment of AI solutions.

JOB REQUIREMENTS

1. Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Data Science, Engineering, or related field or combination of education and work experience required. Advanced degree (Master's in AI/ML, Cybersecurity, or related field) and industry certifications (AI/ML, security, and/or cloud certification related to AI services) preferred.
2. Experience: Minimum one year experience in IT, cybersecurity, and/or AI/ML development with demonstrated experience with AI/ML projects, including model development, deployment, or integration. Experience with cloud platforms (AWS, Azure, GCP) and their AI/ML services preferred.
3. Skills:
   
   
   
   • Working knowledge of machine learning frameworks (TensorFlow, PyTorch, scikit-learn, or similar); Understanding of AI/ML model development lifecycle, including data preparation, training, validation, and deployment.
   • Familiarity with generative AI, large language models, and prompt engineering concepts; Experience with Python, R, or other programming languages used in AI development.
   • Ability to learn cybersecurity principles including CIA triad, defense-in-depth, zero trust, and secure SDLC.
   • Knowledge of AI-specific security concerns (adversarial ML, model poisoning, data privacy, bias).
   • Familiarity with security frameworks (NIST, ISO 27001) and compliance requirements (GDPR, CCPA); Understanding of cloud security, API security, and data protection practices.
   • Strong analytical skills with ability to evaluate complex technical requirements and trade-offs; Experience with data analysis, metrics reporting, and technical troubleshooting.
   • Ability to conduct research and synthesize findings into actionable recommendations; Effective written and verbal communication skills with ability to create clear technical documentation.
   • Ability to explain technical concepts to both technical and non-technical audiences in a clear and concise manner; Ability to work effectively in cross-functional teams; Strong organizational skills and ability to manage multiple concurrent projects.
   • Exercises independent judgment while working under readily available supervision.
   
   
   
   
4. Due to the nature of the work, there may be on-call availability needed outside of normal working hours.
5. Clearance: Ability to obtain and maintain a Top-Secret clearance.
6. Work Eligibility: This position may be eligible for telecommuting or hybrid work arrangements at the discretion of the Supervisor. Employees may be required to work at CNA headquarters or other work locations resulting in changes to the scheduled telecommuting or hybrid work arrangements.