AI Cyber Security Engineer

We are seeking an AI Cyber Security Engineer to support cybersecurity assessments, risk management, adversarial testing, and the responsible application of artificial intelligence to cyber missions. This engineer will combine hands-on offensive and defensive security expertise with an understanding of AI capabilities, limitations, and security best practices.

The engineer will work with multidisciplinary teams evaluating UAS, embedded devices, communications systems, software, and supporting infrastructure. The ideal candidate can translate technical findings into actionable risk decisions, execute authorized security testing, and identify practical ways AI can improve cyber assessment and analysis workflows.

• Plan and execute authorized vulnerability assessments, penetration tests, red-team exercises, and adversarial emulation against systems, networks, applications, and mission-relevant devices.
• Support Risk Management Framework (RMF) activities, including security control selection and assessment, system categorization, risk analysis, POA&M development, and authorization documentation.
• Apply NIST and DoD cybersecurity guidance to evaluate security posture, document control gaps, and recommend prioritized mitigations.
• Evaluate AI-enabled cybersecurity use cases such as vulnerability triage, anomaly detection, threat intelligence enrichment, test automation, and security reporting.
• Assess AI/ML and large language model (LLM) solutions for risks including prompt injection, data leakage, model misuse, insecure integrations, and adversarial manipulation.
• Develop and validate scripts, prototypes, and repeatable test workflows using appropriate automation and AI tools, with human review of findings and safeguards for sensitive data.
• Analyze attack surfaces, network protocols, firmware, software, APIs, and interfaces relevant to UAS, embedded systems, and connected mission technologies.
• Document test methods, evidence, vulnerabilities, exploitability, mission impact, remediation recommendations, and residual risk in clear technical reports.
• Coordinate with engineers, technicians, cyber analysts, program personnel, and stakeholders to support assessments, schedules, and deliverables.
• Follow approved rules of engagement, lab safety practices, configuration management, and applicable security and data-handling requirements.

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Systems, or a related field, or equivalent relevant experience.
• Approximately 10+ years of relevant cybersecurity engineering, assessment, penetration testing, or related technical experience.
• Working knowledge of RMF, NIST SP 800-37, NIST SP 800-53, security control assessment, and cybersecurity risk documentation.
• Hands-on experience with vulnerability assessment, penetration testing, red teaming, or adversarial security testing in authorized environments.
• Strong knowledge of networking, operating systems, common attack techniques, defensive controls, and vulnerability remediation.
• Familiarity with AI/ML and generative AI concepts, practical cybersecurity use cases, and responsible AI practices, including validation, privacy, and security considerations.
• Ability to use scripting or programming (such as Python, PowerShell, or Bash) to support testing, analysis, or automation.
• Ability to communicate technical findings, risk, and remediation recommendations clearly to technical and nontechnical audiences.
• S. citizenship required.
• Ability to obtain and/or maintain a DoD security clearance, if required.

Desired:

• Experience supporting DoD RMF authorization packages, eMASS, STIGs, SCAP, POA&Ms, or assessment and authorization activities.
• Experience with UAS, embedded systems, firmware, RF/wireless communications, tactical networks, or mission systems.
• Familiarity with MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, OWASP Top 10 for LLM Applications, or AI security testing methodologies.
• Experience with security testing tools such as Nmap, Burp Suite, Metasploit, Wireshark, Nessus, or comparable platforms.
• Experience implementing or evaluating AI-assisted SOC workflows, security analytics, retrieval-augmented generation, agentic workflows, or secure model deployment.
• Understanding of AI governance and risk guidance such as the NIST AI Risk Management Framework and secure AI development practices.
• Relevant certifications such as Security+, CISSP, OSCP, GPEN, CEH, or comparable credentials.
• Active Secret clearance.

Knowledge/Skills

• Knowledge of office administration and procedures.
• Exceptional judgment capabilities and relationship management skills.
• Excellent communication, teamwork, and client service skills; ability to clearly communicate in discussions and written documents, and to deliver feedback clearly and tactfully.
• Interact with a diverse array of customers and staff in a professional and courteous manner.
• Work independently with accountability for accurate and complete results.
• Be extremely organized and exceptionally detail oriented.
• Work well both independently and in a team environment.
• Be energized by a fast-paced work environment.
• Must be able to communicate with others effectively.
• Analyze information and respond appropriately.
• Manage time wisely and prioritize tasks.
• Provide superior customer service. 
• Multi-task in a pleasant manner.
• Work well under pressure.

PHYSICAL DEMANDS

• The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
• While performing the duties of this job, the employee is regularly required to talk or hear. The employee frequently is required to stand; walk; handle or feel; and reach with hands and arms.
• The employee is occasionally required to sit; climb or balance; and stoop, kneel, crouch or crawl. The employee must be able to lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds.
• Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception and ability to adjust focus.
• Regular i3 hours are 8:00 a.m. - 5:00 p.m. Monday-Friday, however, additional hours may be required on occasion. Regular and punctual attendance is required.