AI Security Engineer

ConRes helps organizations adopt AI across public cloud government cloud and local and air-gapped data centers. As clients move AI from pilots into production their security compliance and audit teams need an independent answer to one question is this AI system safe to run The AI Security Engineer provides that answer.You will assess test and help govern our clients AI systems and turn findings into prioritized defensible remediation they can act on.ResponsibilitiesAI Security AssessmentsLead AI security assessments of LLM applications RAG pipelines and AI agents architecture review data flows identity tenancy and data separation logging and model-provider configuration.Run threat-modeling workshops using STRIDE with the OWASP Top 10 for LLM Applications OWASP Agentic AI guidance and MITRE ATLAS.Map findings to AI frameworks NIST AI RMF ISOIEC 42001 EU AI Act and to the clients control baseline NIST SP 800-53 NIST SP 800-171 CMMC FedRAMP HIPAA PCI DSS SOC 2 ISOIEC 27001 so stakeholders can defend severity and remediation decisions and produce audit-ready evidence.Write executive-ready reports and present results to client security compliance and leadership teams.Adversarial TestingPlan and execute AI red-team exercises direct and indirect prompt injection jailbreaks system-prompt and data leakage insecure output handling excessive agency and tool abuse in agents RAG and vector-store poisoning.Validate that guardrails and content filters native guardrail services in public and government cloud and self-hosted guardrail models in air-gapped environments actually hold under attack.Local and Air-gapped AI DeploymentsDefine and verify security controls for self-hosted and air-gapped AI inference servers i.e. vLLM Ollama NVIDIA NIM GPU hosts local vector stores and the networks around them.Secure the model supply chain without internet access provenance and hashsignature verification of model weights scanning for unsafe serialization and an approved internal model and package registry.Design and audit controlled data-transfer processes for moving models updates containers and datasets across the air gap.Harden hosts and containers ensure logging monitoring and incident response work without cloud services.Assess data-isolation guarantees and document them for accreditors and auditors.AI Governance and RiskHelp clients develop AI acceptable-use data-handling and modelvendor risk standards suited to their regulatory obligations.Assess the AI vendors and SaaS tools clients are adopting data residency retention training-data use SOC 2 ISO 42001 posture.Define AI security requirements and acceptance criteria for client solutions working with the clients teams and ConRes delivery teams.Help clients detect and manage shadow AI and AI-related data loss data classification DLP and AI threat-protection tooling.Incident Response and EnablementSupport clients in investigating and responding to AI-related incidents data leakage model abuse compromised AI identities or keys.Track emerging AI attack techniques and regulation and keep client assessments and test cases current.Deliver AI security training and workshops for client teams and help shape ConRess AI security services and thought leadership.The pay range for this position begins at 180000 up to 200000 per year.This range reflects the annual salary that Continental Resources reasonably and in good faith expects to pay for this position at the time of posting consistent with the Massachusetts Pay Transparency Law M.G.L. c. 149 § 105E.ConRes