Agentic AI Security Engineer, Lead
About The Position
Booz Allen is seeking a security-focused AI/ML engineer to help customers deploy agentic AI securely and responsibly. The role combines hands-on development, cybersecurity expertise, and architectural thinking to design, build, and evaluate secure AI applications and agentic workflows. The engineer will examine interactions among models, agent orchestration, tools, data sources, and enterprise infrastructure; identify risks; and develop practical controls throughout the system lifecycle. The position involves translating emerging research and complex technical requirements into prototypes, reusable architecture patterns, and technical guidance. The engineer will collaborate with AI engineers, cybersecurity specialists, architects, and mission stakeholders to balance capability, security, and operational needs, and will help teams progress from AI experimentation to secure, governed deployment. The role also provides day-to-day technical leadership, conducts design reviews, and guides architectural decisions.
Requirements
- 8 or more years of experience in software engineering or AI/ML engineering, including developing and deploying AI/ML systems.
- Experience developing in Python and applying software engineering practices, including Git, automated testing, code review, and dependency management.
- Experience building applications using large language models, including tool use, retrieval augmented generation, and agent orchestration.
- Experience designing or evaluating system architectures involving APIs, data pipelines, model services, and enterprise integrations.
- Experience applying cybersecurity principles to software or AI systems, including identity and access management, trust boundaries, secure data handling, and threat modeling.
- Experience with traditional machine learning approaches and algorithms and their applications to cybersecurity.
- Knowledge of NIST security and risk management frameworks, including SP 800-53 and the AI Risk Management Framework, and Zero Trust Architecture principles, including identity-based access, least privilege, and continuous verification.
- Knowledge of AI-specific security risks and approaches for evaluating and mitigating vulnerabilities in generative AI and agentic systems.
- Ability to obtain a Secret clearance.
- Bachelor’s degree in Computer Science, Mathematics, Engineering, or Cybersecurity.
Nice To Haves
- Experience developing agentic AI applications using frameworks or platforms such as Strands Agents, LangGraph, Amazon Bedrock, GraphRAG, or comparable technologies, including integrating agents with workflow orchestration tools such as Temporal.
- Experience securing tool integrations using Model Context Protocol or other agent communication and integration mechanisms.
- Experience conducting AI red teaming, adversarial testing, or automated security evaluations of models and agentic workflows.
- Experience implementing AI gateways, policy enforcement, execution sandboxes, agent observability, or human-in-the-loop controls.
- Experience deploying AI applications in cloud or on-premises environments using containers, CI/CD pipelines, and Infrastructure-as-Code.
- Experience with model training, fine-tuning, evaluation, or serving using PyTorch or comparable technologies.
- Experience with distributed computing, data engineering, feature pipelines, or relational and vector databases.
- Experience applying NIST guidance and Zero Trust Architecture principles to AI systems and translating security requirements into architectural controls, implementation patterns, and assessment evidence.
- TS/SCI clearance.
Responsibilities
- Design and validate secure architectures for generative AI applications, AI agents, and multi-agent systems, including model access, orchestration, tool execution, memory, and retrieval augmented generation.
- Develop prototypes and reference implementations to demonstrate security controls and evaluate architectural tradeoffs.
- Assess AI systems for prompt injection, sensitive data exposure, excessive permissions, unsafe tool execution, compromised integrations, and other risks.
- Design and implement controls for agent identity, least-privilege access, execution isolation, tool authorization, data protection, and human approval of consequential actions.
- Develop architecture diagrams, data flow diagrams, trust boundary models, and technical documentation explaining system behavior, control placement, and implementation requirements.
- Establish evaluation and monitoring approaches for agent behavior, security, reliability, and policy compliance, including traceability across model interactions and tool calls.
- Translate security and governance requirements into engineering practices, including testing, version control, change management, audit trails, and rollback procedures.
- Evaluate emerging models, agent frameworks, integration protocols, and security tools, and communicate findings and recommendations to technical and non-technical audiences.
- Provide day-to-day technical leadership to engineers.
- Conduct design reviews, guide architectural decisions, and raise the overall technical bar of the team.
Benefits
- Health, life, disability, financial, and retirement benefits.
- Paid leave.
- Professional development.
- Tuition assistance.
- Work-life programs.
- Dependent care.
- Recognition awards for exceptional performance and demonstration of company values.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
