AI Investigations & Enforcement Analyst

About Vanguard Founded in 1975, Vanguard is one of the world's leading investment management companies. The firm offers investments, advice, and retirement services to tens of millions of individual investors around the globe—directly, through workplace plans, and through financial intermediaries. Vanguard India Vanguard’s office in India is a significant milestone in our global expansion. We are committed to establishing an enduring technology center in Hyderabad, Telangana and are excited to be adding talent who will focus on Artificial Intelligence (AI), mobile, and cloud-based technologies that drive our business outcomes and deliver a world-class experience for our clients.   Role Summary We are seeking an experienced security practitioner responsible for investigating AI-related security events and executing approved enforcement actions across enterprise AI use cases. This role supports a 24/7 operational security function and combines hands-on threat investigation, policy validation, evidence collection, and control tuning to reduce risk while enabling secure adoption of AI technologies.  Responsibilites Triage and investigate alerts involving enterprise AI applications, LLMs, AI agents, plugins, skills, browser extensions, local IDE tooling, agent-to-agent traffic, and SaaS/PaaS attack surfaces.  Correlate telemetry from endpoint, network, cloud, SaaS/PaaS, identity, AI gateway, and application controls to determine scope, cause, and potential impact.  Execute documented enforcement actions such as blocking prohibited AI destinations or tools, restricting risky agent capabilities, escalating compromised identities, and recommending policy changes.  Validate detections and enforcement policies through controlled sandbox and adversarial testing, including prompt injection, impersonation, data leakage, unsafe tool use, and unauthorized model or agent access.  Maintain investigation of records, evidence, indicators, case timelines, and remediation actions in accordance with security operations procedures.  Partner with SOC, incident response, identity, endpoint, network, cloud, application security, and AI platform teams to resolve AI security findings.  Identify recurring investigation patterns and recommend detection logic, runbook, dashboard, or policy improvements.  Qualifications and Skills Minimum 5 years of experience in cyber threat detection, incident response, or security operations with exposure to real-time threat analysis and response strategies. Bachelor’s degree (B.E./B.Tech) in Computer Science, Cybersecurity, Information Technology or a related discipline, or a Master’s degree/Diploma in Cybersecurity or Network Security. cybersecurity, security operations, incident response, threat analysis, application security, cloud security, or a related discipline, including hands-on experience investigating or securing workloads in public cloud environments.