Position SummaryThe AI Security Engineer designs, assesses, documents, and improves cybersecurity, privacy, and AI-specific security controls for DOL AI systems. The role ensures that AI-enabled applications, data pipelines, models, RAG systems, vector stores, agentic workflows, APIs, and cloud services are secured and supported by evidence required for Government authorization and production release.
Essential Duties- Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
- Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, vector stores, MCP servers, APIs, orchestration services, and CI/CD pipelines.
- Conduct AI-specific security testing, including prompt injection, jailbreaks, malicious-input attacks, retrieval manipulation, data poisoning, model extraction, model inversion, credential compromise, access-control bypass, insecure output handling, and tool-abuse scenarios.
- Apply Zero Trust, least privilege, role-based access, FIPS-validated encryption, secrets management, audit logging, secure configuration, vulnerability management, and secure software-development practices.
- Support FISMA, RMF, and ATO activities, including security categorization, system boundaries, SSPs, SAPs, SARs, POA&Ms, continuous monitoring, security assessments, risk decisions, and remediation evidence.
- Support assessment and approval of AI models, third-party AI services, cloud services, model providers, APIs, tools, and data-handling practices before their integration into DOL systems.
- Validate that approved cloud AI services satisfy applicable FedRAMP requirements and DOL authorization expectations.
- Ensure PII, CUI, prompts, retrieval context, embeddings, model outputs, logs, backups, and evaluation data are protected through approved controls.
- Support AI Incident Response Plan development and maintenance, including escalation paths, evidence preservation, reporting templates, severity classification, containment procedures, and post-incident review.
- Coordinate security incident investigation, containment, mitigation, recovery, and reporting for suspected or confirmed security events.
- Support supply-chain security, Software Bill of Materials generation, dependency scanning, secure-development attestations, vulnerability remediation, and third-party risk management.
- Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.
Required Qualifications- Bachelor's degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
- At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
- Experience with Federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST SP 800-171, FIPS 199, FIPS 200, FedRAMP, and RMF/ATO.
- Experience securing cloud applications, APIs, data platforms, CI/CD pipelines, identity services, and containerized or cloud-native systems.
- Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
- Working knowledge of AI/ML security threats, including prompt injection, jailbreaking, model compromise, model extraction, data poisoning, RAG poisoning, retrieval manipulation, and AI supply-chain risks.
- Strong communication skills and ability to coordinate with engineering, privacy, governance, security, program-management, and Government stakeholders.
- Must be willing to work 3 days onsite at customer site in Washington, DC.
Preferred Qualifications- CISSP, CCSP, CISM, Security+, AWS Security Specialty, Azure Security Engineer, GIAC, CEH, or comparable security certification.
- Experience with AI red teaming, AI threat modeling, OWASP Top 10 for LLM Applications, NIST AI RMF, CISA AI guidance, MITRE AI security frameworks, or adversarial ML testing.
- Experience with SIEM/SOAR, CSPM, secrets management, SAST/DAST, container security, SBOMs, software supply-chain assurance, and cloud security posture management.
- Experience with Federal civilian agencies, Government ATO packages, or FedRAMP environments.
Summary of Benefits- 15 PTO days
- 11 paid holidays
- Medical Insurance with - 3 options (HSA with $600 Employer Contribution).
- Dental Insurance with no age limit orthodonture.
- Vision Insurance through EyeMed in and out of network coverage.
- Short Term and Long-Term Disability coverage with 100% premium support,
- Life insurance and AD&D with 100% premium support
- Supplemental Life Insurance
- Critical Care and Accident Insurance availability
- Pet Insurance through Nationwide
- Employee Assistance Program
- 401k with enrollment from day one. 4% deferral by company.
- $1500 Annual Training Budget
- $1500 Referral bonus
- Eligibility for annual merit and discretionary bonus
- Flexible work arrangements
