AI Security Specialist/SME

Koniag Government Services, LLC•Washington, DC

1d•$190,000 - $212,080•Onsite

About The Position

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking an experienced AI Security Specialist / Subject Matter Expert (SME) to support the development, implementation, and management of artificial intelligence security programs, policies, and risk management initiatives in support of the U.S. Small Business Administration (SBA). The ideal candidate is a senior-level cybersecurity and AI professional with deep expertise in AI/ML security principles, AI risk management frameworks, and the unique security challenges and considerations associated with the adoption, development, and operation of AI systems within a federal government environment. This individual will serve as SBA's subject matter expert on AI security matters, providing expert guidance and technical leadership to ensure AI systems and initiatives across the SBA are developed, deployed, and operated securely, responsibly, and in compliance with applicable federal AI policies, executive orders, and emerging regulatory requirements. The AI Security Specialist / SME will serve as the senior technical lead and subject matter expert for AI security at the SBA, working closely with SBA's IT leadership, security teams, data science and AI development teams, program managers, legal counsel, and external partners to develop and implement a comprehensive AI security program that enables SBA to adopt and leverage AI technologies securely, responsibly, and in alignment with federal AI governance requirements.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Artificial Intelligence, Data Science, Information Technology, or a related field from an accredited college or university, OR equivalent combination of education and extensive relevant work experience.
7+ years of progressive experience in cybersecurity, with significant demonstrated experience in AI/ML security, data science security, or a closely related field within a federal government or large enterprise environment.
Demonstrated expert-level knowledge of AI/ML security principles, adversarial machine learning concepts, and AI-specific threat vectors including model poisoning, adversarial attacks, model inversion, and data integrity threats.
Demonstrated familiarity with federal AI governance frameworks and requirements including NIST AI Risk Management Framework (AI RMF), Executive Order 13960, Executive Order 14110, and applicable OMB AI memoranda and guidance.
One or more of the following certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent senior-level cybersecurity certification, supplemented by demonstrated AI/ML security expertise.
Ability to obtain and maintain a Public Trust clearance as required by the SBA.

Nice To Haves

Master's degree or Ph.D. in Cybersecurity, Computer Science, Artificial Intelligence, Data Science, or a related field.
Prior experience serving as an AI security SME or advisor supporting a federal civilian agency, preferably the SBA or a similar organization.
Certified Artificial Intelligence Security Specialist (CAISS) or equivalent AI security certification, or active pursuit of same.
Demonstrated experience with AI red teaming, adversarial robustness testing, or AI penetration testing methodologies.
Expert-level knowledge of AI and machine learning concepts, architectures, and development methodologies, with the ability to apply this knowledge to identify, assess, and mitigate security risks across a broad range of AI system types and use cases.
Deep expertise in AI/ML security principles and adversarial machine learning, including comprehensive understanding of AI-specific threat vectors such as adversarial examples, model poisoning, backdoor attacks, model inversion, membership inference, and data poisoning attacks.
Demonstrated ability to develop and implement comprehensive AI security risk assessment methodologies, testing frameworks, and evaluation criteria for assessing the security and trustworthiness of federal AI systems.
Expert-level knowledge of federal AI governance frameworks and requirements including NIST AI RMF, applicable executive orders, and OMB AI guidance, with the ability to translate these requirements into practical AI security program activities and controls.
Strong experience collaborating with data science and AI development teams to integrate security best practices and requirements into AI development workflows, MLOps pipelines, and AI system architectures.
Solid understanding of the security implications of generative AI technologies and large language models (LLMs), including prompt injection attacks, data leakage risks, model abuse scenarios, and strategies for the secure and responsible deployment of generative AI capabilities.
Experience developing AI governance documentation including AI use case inventories, AI impact assessments, and AI system security documentation in alignment with federal AI transparency and accountability requirements.
Strong understanding of the intersection of AI security with privacy, data governance, and ethics, including the ability to address AI-related privacy risks and data protection requirements within an AI security program context.
Solid understanding of federal cybersecurity frameworks and requirements including NIST SP 800-53, FISMA, and relevant OMB and CISA guidance, and their relationship to AI security program development and implementation.
Exceptional written and oral communication skills in English, with the ability to clearly communicate complex AI security concepts, risk assessments, and strategic recommendations to both technical teams and senior non-technical audiences including agency leadership.
Strong leadership skills with demonstrated experience providing expert technical guidance and oversight on AI security matters to cross-functional teams including security, IT, data science, legal, and program management staff.
Prior experience serving as an AI security SME or advisor supporting the SBA or a similar federal civilian agency.
In-depth familiarity with SBA's AI initiatives, IT environment, and mission areas, including an understanding of the unique AI security challenges and opportunities associated with SBA's specific use cases and operational context.
Demonstrated experience with AI red teaming, adversarial robustness testing, or AI penetration testing methodologies, including hands-on experience using adversarial machine learning tools and frameworks such as IBM Adversarial Robustness Toolbox (ART), Microsoft Counterfit, or similar.
Advanced knowledge of MLOps practices and platforms and their security implications, including experience integrating AI security controls and testing into ML pipelines and model deployment workflows.
Experience with AI supply chain security considerations, including the security risks associated with pre-trained models, open-source AI libraries, and third-party AI services and APIs.
Familiarity with AI fairness, explainability, and transparency concepts and their relationship to AI security and trustworthiness in a federal government context.
Experience with cloud-based AI/ML platforms and services such as AWS SageMaker, Microsoft Azure Machine Learning, or Google Vertex AI, and their security configurations, access controls, and monitoring capabilities.
Knowledge of natural language processing (NLP) and computer vision AI application security considerations and specific threat vectors relevant to these AI domains.
Experience participating in federal interagency AI security working groups, NIST AI RMF development activities, or OMB AI governance oversight engagements.
Certified Artificial Intelligence Security Specialist (CAISS), AI Security certification from a recognized professional organization, or other relevant advanced AI or cybersecurity certifications.
Experience developing and delivering AI security training programs for large, diverse federal agency workforces including both technical and non-technical personnel.
Familiarity with international AI governance frameworks and standards such as the EU AI Act, ISO/IEC 42001, and their relationship to federal AI security and governance requirements.

Responsibilities

Serve as SBA's senior SME and technical lead for AI security, providing expert guidance, strategic direction, and technical leadership on all matters related to the security of AI systems, machine learning models, and AI-enabled applications across the SBA enterprise.
Develop, implement, and maintain SBA's AI security program, including the development of AI security policies, standards, guidelines, and risk management frameworks aligned with applicable federal AI executive orders, OMB AI guidance, NIST AI Risk Management Framework (AI RMF), and other relevant federal AI governance requirements.
Lead the conduct of AI security risk assessments and reviews for SBA AI systems and initiatives, evaluating AI-specific security risks including adversarial attacks, model poisoning, data integrity threats, model inversion, and other AI/ML-specific threat vectors, and developing comprehensive risk mitigation strategies.
Provide expert security guidance and oversight throughout the AI system lifecycle, from requirements and design through development, testing, deployment, and operations, ensuring AI security requirements are properly integrated at each phase.
Develop and maintain AI security assessment methodologies, testing frameworks, and evaluation criteria for assessing the security and trustworthiness of AI systems and machine learning models deployed within the SBA environment.
Collaborate with SBA's data science, AI development, and application teams to integrate AI security best practices, secure development guidelines, and security testing requirements into AI development workflows and processes.
Lead the development and implementation of AI governance documentation for SBA, including AI use case inventories, AI impact assessments, AI system security plans, and other required AI governance artifacts in alignment with federal AI transparency and accountability requirements.
Monitor and analyze the AI threat landscape, including emerging adversarial AI attack techniques, AI vulnerability disclosures, and evolving federal AI security guidance, providing timely threat assessments and recommendations to SBA security leadership.
Provide expert guidance on the security implications of generative AI technologies and large language models (LLMs), including the development of SBA policies and guidelines for the secure and responsible use of generative AI tools by SBA personnel and contractors.
Collaborate with SBA's privacy team to address the intersection of AI security and privacy, including AI-related privacy risks, data minimization requirements, and the privacy implications of AI model training, deployment, and output.
Support the integration of AI security considerations into SBA's existing cybersecurity frameworks, risk management processes, and security authorization activities, including the development of AI-specific security control overlays and assessment procedures.
Serve as SBA's representative and technical SME in engagements with OMB, CISA, NIST, and other federal partners on AI security-related matters, including participation in interagency AI security working groups and forums.
Develop and deliver comprehensive AI security awareness and training programs for SBA personnel and contractors, ensuring all staff understand the security risks, responsibilities, and requirements associated with the use and development of AI systems.
Lead and support after-action reviews and lessons learned following AI security incidents or near-misses, translating findings into actionable improvements to SBA's AI security program and practices.
Develop and deliver AI security briefings, program reports, and strategic recommendations for SBA senior leadership and oversight bodies, providing clear and compelling insights into AI security risks, program status, and compliance posture.
Stay at the forefront of AI security research, technology developments, federal policy updates, and industry best practices, applying this knowledge to continuously refine and strengthen SBA's AI security program.