AI/ML Security Specialist (R-00247)

True Zero Technologies•Ashburn, VA

About The Position

True Zero Technologies is seeking an experienced AI/ML Cybersecurity Specialist to support security assessment, operational testing, and protection of artificial intelligence and machine learning systems in a federal environment. The role focuses on identifying vulnerabilities in AI/ML applications, conducting adversarial testing, evaluating security risks, and developing defensive strategies to strengthen the organization's cybersecurity posture. The specialist will communicate technical findings and actionable recommendations to federal stakeholders. The position includes assessing AI/ML applications, models, and supporting infrastructure; testing for AI-specific attack techniques; designing defensive measures; and producing technical reports, security plans, threat models, and repeatable assessment methods. The specialist will work with cybersecurity engineers, AI/ML developers, technical leads, and federal stakeholders to integrate security across the development and deployment lifecycle, while aligning assessments and defenses with applicable federal cybersecurity policies and standards.

Requirements

Demonstrated experience in cybersecurity engineering, security assessments, or penetration testing, with a strong focus on AI/ML security, adversarial machine learning, and model evaluation.
Strong understanding of AI/ML architectures, machine learning algorithms, large language models (LLMs), model training pipelines, and secure deployment practices.
Hands-on experience identifying and evaluating AI-specific security vulnerabilities, including prompt injection, adversarial examples, data poisoning, model extraction, model inversion, and evasion attacks.
Experience conducting penetration testing, vulnerability assessments, red teaming, or OT&E of software applications, AI/ML models, or supporting infrastructure.
Proficiency with Python and familiarity with AI/ML frameworks such as PyTorch, TensorFlow, or scikit-learn, along with security testing tools and adversarial assessment methodologies.
Knowledge of federal cybersecurity requirements and security frameworks, including NIST AI Risk Management Framework (AI RMF), NIST SP 800-53, NIST Cybersecurity Framework, and applicable DHS/CBP security policies.
Experience developing technical assessment reports, threat models, security testing methodologies, remediation recommendations, and SOPs.
Strong analytical, problem-solving, written, and verbal communication skills, including the ability to present complex technical findings and security recommendations to federal stakeholders, engineering teams, and technical leadership.

Responsibilities

Conduct Operational Testing and Evaluation (OT&E) of AI/ML applications, models, and supporting infrastructure to identify security vulnerabilities, operational risks, and potential attack vectors.
Perform adversarial AI/ML security assessments, including model evasion, data poisoning, model extraction, adversarial manipulation, and model inversion testing.
Evaluate existing cybersecurity defenses, identify weaknesses exploitable through AI-enabled attacks, and recommend mitigation strategies and security controls.
Design, implement, and evaluate defensive security measures for AI/ML models, training data, inference pipelines, and deployed applications.
Develop technical assessment reports documenting vulnerabilities, testing methodologies, risk severity, and actionable remediation recommendations.
Create and maintain Standard Operating Procedures (SOPs), security testing plans, threat models, and repeatable methodologies for AI/ML security evaluations.
Collaborate with cybersecurity engineers, AI/ML developers, technical leads, and federal stakeholders to integrate security best practices throughout the AI/ML development and deployment lifecycle.
Ensure AI/ML security assessments, testing procedures, and defensive implementations align with DHS, CBP, NIST, and applicable federal cybersecurity policies and standards.

Benefits

Competitive salary, paid twice per month
Best-in-class medical coverage
100% of medical premiums covered by True Zero
Company-wide new business incentive programs
Contribution incentives for items such as white papers, blog posts, and internal webinars
3 weeks of PTO starting, plus 11 paid holidays annually
401(k) program with 100% company match on the first 4%
Monthly reimbursement of cell phone and home internet costs
Paternity/maternity leave
Investment in training and certifications to broaden and deepen technical skills