AI/ML Security Specialist (R-00247)
True Zero Technologies13 days ago
Ashburn, VA, USASenior
Responsibilities
- Conduct operational testing and evaluation of AI/ML applications, models, and supporting infrastructure.
- Perform adversarial AI/ML security assessments, including model evasion, data poisoning, model extraction, model inversion, and adversarial manipulation testing.
- Evaluate cybersecurity defenses for weaknesses exploitable through AI-enabled attacks and recommend mitigations and security controls.
- Design, implement, and evaluate defensive measures protecting AI/ML models, training data, inference pipelines, and deployed applications.
- Develop technical assessment reports covering vulnerabilities, methodologies, risk severity, and remediation recommendations.
- Create and maintain SOPs, security testing plans, threat models, and repeatable AI/ML security evaluation methodologies.
- Collaborate with cybersecurity engineers, AI/ML developers, technical leads, and federal stakeholders.
- Ensure assessments and implementations align with DHS, CBP, NIST, and applicable federal cybersecurity policies and standards.
Requirements
- Experience in cybersecurity engineering, security assessments, or penetration testing with a focus on AI/ML security, adversarial machine learning, and model evaluation.
- Strong understanding of AI/ML architectures, machine learning algorithms, LLMs, model training pipelines, and secure deployment practices.
- Hands-on experience evaluating AI-specific vulnerabilities such as prompt injection, adversarial examples, data poisoning, model extraction, model inversion, and evasion attacks.
- Experience with penetration testing, vulnerability assessments, red teaming, or OT&E of software applications, AI/ML models, or supporting infrastructure.
- Proficiency with Python and familiarity with PyTorch, TensorFlow, scikit-learn, security testing tools, and adversarial assessment methodologies.
- Knowledge of NIST AI RMF, NIST SP 800-53, the NIST Cybersecurity Framework, and applicable DHS/CBP security policies.
- Experience developing technical reports, threat models, security testing methodologies, remediation recommendations, and SOPs.
- Strong analytical, problem-solving, written, and verbal communication skills, including the ability to present findings to federal stakeholders and technical teams.
Benefits
- Competitive salary paid twice per month.
- Best-in-class medical coverage with 100% of medical premiums covered by True Zero.
- Company-wide new business incentive programs.
- Contribution incentives for white papers, blog posts, internal webinars, and similar activities.
- Three weeks of PTO plus 11 paid holidays annually.
- 401(k) program with 100% company match on the first 4%.
- Monthly reimbursement for cell phone and home internet costs.
- Paternity and maternity leave.
- Training and certification investment.
- The employer is a veteran-owned small business and has been recognized as a Best Places to Work honoree.
Categories
About True Zero Technologies
True Zero Technologies provides cybersecurity consulting and managed security services to public- and private-sector organizations, including federal, defense, and SLED customers. Its offerings span SOC operations, incident response, security engineering and architecture, SIEM migration, endpoint security, and Zero Trust design and implementation. Founded in 2016 and headquartered in Fairfax, Virginia, the privately held, veteran-owned firm delivers both project-based engagements and ongoing managed services.