Provides cybersecurity engineering support for U.S. Navy aircraft carrier systems, including security requirements, risk assessments, RMF, testing and authorization, and resilient system integration.
AI/ML Security Specialist (R-00247)
📜 Description
- Conduct operational testing of AI/ML applications, models, and infrastructure to identify vulnerabilities, risks, and attack vectors.
- Test for AI/ML threats such as model evasion, data poisoning, model extraction, model inversion, and adversarial manipulation.
- Evaluate cybersecurity defenses and recommend mitigations and controls against AI-enabled attacks.
- Design and assess protections for models, training data, inference pipelines, and deployed applications.
- Document findings, testing methods, risk severity, and remediation recommendations in technical reports.
- Develop testing plans, threat models, SOPs, and repeatable assessment methods; collaborate with engineering teams and federal stakeholders to align practices with applicable standards.
🛠️ Requirements
- Demonstrated experience in cybersecurity engineering, security assessments, or penetration testing, with a strong focus on AI/ML security, adversarial machine learning, and model evaluation.
- Strong understanding of AI/ML architectures, machine learning algorithms, large language models (LLMs), model training pipelines, and secure deployment practices.
- Hands-on experience identifying and evaluating AI-specific security vulnerabilities, including prompt injection, adversarial examples, data poisoning, model extraction, model inversion, and evasion attacks.
- Experience conducting penetration testing, vulnerability assessments, red teaming, or Operational Testing and Evaluation (OT&E) of software applications, AI/ML models, or supporting infrastructure.
- Proficiency with Python and familiarity with AI/ML frameworks such as PyTorch, TensorFlow, or scikit-learn, along with security testing tools and adversarial assessment methodologies.
- Knowledge of federal cybersecurity requirements and security frameworks, including NIST AI Risk Management Framework (AI RMF), NIST SP 800-53, NIST Cybersecurity Framework, and applicable DHS/CBP security policies.
- Experience developing technical assessment reports, threat models, security testing methodologies, remediation recommendations, and Standard Operating Procedures (SOPs).
- Strong analytical, problem-solving, and written and verbal communication skills, with the ability to present complex technical findings and security recommendations to federal stakeholders, engineering teams, and technical leadership.
✨ Benefits
- Competitive salary, paid twice per month
- Medical coverage
- 100% of medical premiums covered
- Company-wide new business incentive programs
- Contribution incentives for white papers, blog posts, and internal webinars
- 3 weeks of PTO starting
- 11 paid holidays annually
- 401(k) with 100% company match on the first 4%
Full job description
True Zero is seeking an experienced AI/ML Cybersecurity Specialist to support the security assessment, operational testing, and protection of artificial intelligence and machine learning systems within a federal environment. This role will focus on identifying vulnerabilities in AI/ML applications, conducting adversarial testing, evaluating security risks, and developing defensive strategies to strengthen the organization's cybersecurity posture. The ideal candidate will possess a strong background in cybersecurity, hands-on experience with AI/ML security testing, and the ability to communicate technical findings and actionable recommendations to federal stakeholders.
Job Responsibilities
Job Qualifications
Similar jobs
Search more Cybersecurity Engineer jobsTest and exploit vulnerabilities across AI evaluation sandboxes, cloud, identity and application infrastructure, while building agent-assisted red-teaming tools and helping teams harden systems.
Consultor Pentester Sênior
Conduz projetos de Red Team e testes de intrusão em aplicações, dispositivos e infraestrutura, identifica vulnerabilidades, valida relatórios e orienta consultores em trabalhos de maior complexidade.
Own end-to-end detection engineering, incident investigation, and security automation, building and validating threat coverage across cloud and SaaS environments while communicating performance to security leadership.
Design, deploy, and operate enterprise data loss prevention and secure access capabilities, reducing data exfiltration risk while enabling secure access across endpoints, SaaS, private applications, and cloud environments.
