AI/ML Security Specialist (R-00247)

True Zero Technologies•Ashburn, VA

About The Position

True Zero Technologies is seeking an experienced AI/ML Cybersecurity Specialist to support the security assessment, operational testing, and protection of artificial intelligence and machine learning systems in a federal environment. The role focuses on identifying vulnerabilities in AI/ML applications, conducting adversarial testing, evaluating security risks, and developing defensive strategies to strengthen cybersecurity. The specialist will communicate technical findings and actionable recommendations to federal stakeholders. The position involves assessing AI/ML applications, models, and supporting infrastructure; testing for AI-specific threats; and designing security measures for models, training data, inference pipelines, and deployed applications. The specialist will document assessments, maintain repeatable testing methodologies, collaborate with technical and federal stakeholders, and align work with applicable federal cybersecurity policies and standards.

Requirements

Demonstrated experience in cybersecurity engineering, security assessments, or penetration testing, with a strong focus on AI/ML security, adversarial machine learning, and model evaluation.
Strong understanding of AI/ML architectures, machine learning algorithms, large language models (LLMs), model training pipelines, and secure deployment practices.
Hands-on experience identifying and evaluating AI-specific security vulnerabilities, including prompt injection, adversarial examples, data poisoning, model extraction, model inversion, and evasion attacks.
Experience conducting penetration testing, vulnerability assessments, red teaming, or OT&E of software applications, AI/ML models, or supporting infrastructure.
Proficiency with Python and familiarity with AI/ML frameworks such as PyTorch, TensorFlow, or scikit-learn, as well as security testing tools and adversarial assessment methodologies.
Knowledge of federal cybersecurity requirements and frameworks, including NIST AI Risk Management Framework (AI RMF), NIST SP 800-53, NIST Cybersecurity Framework, and applicable DHS/CBP security policies.
Experience developing technical assessment reports, threat models, security testing methodologies, remediation recommendations, and SOPs.
Strong analytical, problem-solving, written, and verbal communication skills, including the ability to present technical findings and recommendations to federal stakeholders, engineering teams, and technical leadership.

Responsibilities

Conduct Operational Testing and Evaluation (OT&E) of AI/ML applications, models, and supporting infrastructure to identify security vulnerabilities, operational risks, and attack vectors.
Perform adversarial AI/ML security assessments, including model evasion, data poisoning, model extraction, adversarial manipulation, and model inversion testing.
Evaluate cybersecurity defenses, identify weaknesses that could be exploited through AI-enabled attacks, and recommend mitigation strategies and security controls.
Design, implement, and evaluate defensive measures to protect AI/ML models, training data, inference pipelines, and deployed applications.
Develop technical assessment reports documenting vulnerabilities, testing methodologies, risk severity, and remediation recommendations.
Create and maintain Standard Operating Procedures (SOPs), security testing plans, threat models, and repeatable AI/ML security evaluation methodologies.
Collaborate with cybersecurity engineers, AI/ML developers, technical leads, and federal stakeholders to integrate security practices throughout the AI/ML development and deployment lifecycle.
Ensure AI/ML security assessments, testing procedures, and defensive implementations align with DHS, CBP, NIST, and applicable federal cybersecurity policies and standards.

Benefits

Competitive salary, paid twice per month
Best-in-class medical coverage
True Zero covers 100% of medical premiums
Company-wide new business incentive programs
Contribution incentives for items such as white papers, blog posts, and internal webinars
Three weeks of PTO to start
11 paid holidays annually
401(k) program with 100% company match on the first 4%
Monthly reimbursement of cell phone and home internet costs
Paternity and maternity leave
Investment in training and certifications