AI Security Engineer- Hybrid (US Citizens/ Green Cards- Local to DMV only)

Position Summary

The AI Security Engineer designs, assesses, documents, and improves cybersecurity, privacy, and AI-specific security controls for DOL AI systems. The role ensures that AI-enabled applications, data pipelines, models, RAG systems, vector stores, agentic workflows, APIs, and cloud services are secured and supported by evidence required for Government authorization and production release.

Essential Duties

• Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
• Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, vector stores, MCP servers, APIs, orchestration services, and CI/CD pipelines.
• Conduct AI-specific security testing, including prompt injection, jailbreaks, malicious-input attacks, retrieval manipulation, data poisoning, model extraction, model inversion, credential compromise, access-control bypass, insecure output handling, and tool-abuse scenarios.
• Apply Zero Trust, least privilege, role-based access, FIPS-validated encryption, secrets management, audit logging, secure configuration, vulnerability management, and secure software-development practices.
• Support FISMA, RMF, and ATO activities, including security categorization, system boundaries, SSPs, SAPs, SARs, POA&Ms, continuous monitoring, security assessments, risk decisions, and remediation evidence.
• Support assessment and approval of AI models, third-party AI services, cloud services, model providers, APIs, tools, and data-handling practices before their integration into DOL systems.
• Validate that approved cloud AI services satisfy applicable FedRAMP requirements and DOL authorization expectations.
• Ensure PII, CUI, prompts, retrieval context, embeddings, model outputs, logs, backups, and evaluation data are protected through approved controls.
• Support AI Incident Response Plan development and maintenance, including escalation paths, evidence preservation, reporting templates, severity classification, containment procedures, and post-incident review.
• Coordinate security incident investigation, containment, mitigation, recovery, and reporting for suspected or confirmed security events.
• Support supply-chain security, Software Bill of Materials generation, dependency scanning, secure-development attestations, vulnerability remediation, and third-party risk management.
• Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.

Required Qualifications

• Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
• At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
• Experience with Federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST SP 800-171, FIPS 199, FIPS 200, FedRAMP, and RMF/ATO.
• Experience securing cloud applications, APIs, data platforms, CI/CD pipelines, identity services, and containerized or cloud-native systems.
• Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
• Working knowledge of AI/ML security threats, including prompt injection, jailbreaking, model compromise, model extraction, data poisoning, RAG poisoning, retrieval manipulation, and AI supply-chain risks.
• Strong communication skills and ability to coordinate with engineering, privacy, governance, security, program-management, and Government stakeholders.
• Must be willing to work 3 days onsite at customer site in Washington, DC.

Preferred Qualifications

• CISSP, CCSP, CISM, Security+, AWS Security Specialty, Azure Security Engineer, GIAC, CEH, or comparable security certification.
• Experience with AI red teaming, AI threat modeling, OWASP Top 10 for LLM Applications, NIST AI RMF, CISA AI guidance, MITRE AI security frameworks, or adversarial ML testing.
• Experience with SIEM/SOAR, CSPM, secrets management, SAST/DAST, container security, SBOMs, software supply-chain assurance, and cloud security posture management.
• Experience with Federal civilian agencies, Government ATO packages, or FedRAMP environments.

Summary of Benefits

• 15 PTO days
• 11 paid holidays
• Medical Insurance with – 3 options (HSA with $600 Employer Contribution).
• Dental Insurance with no age limit orthodonture.
• Vision Insurance through EyeMed in and out of network coverage.
• Short Term and Long-Term Disability coverage with 100% premium support,
• Life insurance and AD&D with 100% premium support
• Supplemental Life Insurance
• Critical Care and Accident Insurance availability
• Pet Insurance through Nationwide
• Employee Assistance Program
• 401k with enrollment from day one. 4% deferral by company.
• $1500 Annual Training Budget
• $1500 Referral bonus
• Eligibility for annual merit and discretionary bonus
• Flexible work arrangements

Equal Opportunity Employer Minority/Female/Veterans/Disabled