AI Security Engineer

Key Responsibilities: Support the NIST RMF ATO process for each AI system, including boundary definition, FISMA categorization, and authorization documents (SSP, SAR, POA&M).Plan and perform AI-specific adversarial testing and red teaming (prompt injection, jailbreak, data poisoning, model inversion/extraction, unsafe output, and unauthorized disclosure), and track findings through remediation. Assemble AI security certification packages, including vulnerability scan and penetration test results and POA&M updates, so that no High or Critical findings remain unmitigated at release. Implement and verify security controls for AI systems: Zero Trust and least-privilege access, FIPS-validated encryption, secrets management, secure LLM API key handling, and FedRAMP boundary and TIC compliance. Develop and maintain the AI Incident Response Plan and Business Continuity Plan; support incident triage, containment, and reporting within required timeframes; and lead post-incident reviews. Design security monitoring for AI workloads, including detection of prompt-injection attempts, jailbreaks, credential misuse, and vector database anomalies, plus compliance tracking of control drift. Support privacy documentation (PTA/PIA), significant-change notifications, annual assessments, and continuous monitoring reviews. Advise AI engineers during design and code reviews to build security in, and brief Government security staff on risks and mitigations.

Requirements: Bachelor's degree in Engineering, Computer Science, Systems, or a related technical discipline and 8+ years of relevant experience.5+ years of hands-on cybersecurity experience supporting federal ATO efforts under the NIST RMF and the NIST SP 800-53 Moderate control baseline.1+ year of hands-on experience securing or testing AI/ML or Generative AI systems, such as LLM red teaming, prompt-injection testing, or AI threat modeling. Experience with cloud security in FedRAMP-authorized environments (AWS, Azure, or Google Cloud).Experience with vulnerability scanning, penetration testing, and remediation tracking tools. Experience developing incident response and supply chain risk management documentation. Must be a U.S. citizen or lawful permanent resident (green card holder).Must reside in the Washington, DC metropolitan area and be able to work on-site at Government offices. Must be able to obtain and maintain a NACI Tier 1 background investigation.

Preferred Qualifications: Security certification such as CISSP, CISM, CCSP, OSCP, or CEH.Familiarity with the NIST AI Risk Management Framework, OWASP Top 10 for LLM Applications, and MITRE ATLAS.Experience with federal GRC tools and with SBOM generation or analysis (CycloneDX or SPDX).Experience with NIST SP 800-161 (supply chain) and NIST SP 800-171 requirements.

ABOUT US: Precise Software Solutions, Inc. is a mission-focused technology services company delivering secure digital platforms, infrastructure, and operational IT services to government organizations. A CMMI Level 3–appraised company, Precise partners with agency technology leaders and solution providers to design, build, operate, and modernize enterprise IT solutions that support critical public missions combining agility, innovation, and performance to deliver measurable results. Precise specializes in cloud and hybrid infrastructure, platform engineering, security operations and compliance, application modernization, and data platforms and analytics. The company is known for its agile, delivery-driven approach and innovative engineering practices, applying operational rigor and performance-focused execution to improve system resilience, security, and scalability across complex government environments.

BENEFITS AND PERKS: Comprehensive Health Benefits (Medical, Dental and Vision)

Equal Employment Opportunity Statement: Precise Software Solutions is committed to providing a workplace free from discrimination and harassment. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, age, national origin, disability, sexual orientation, gender identity or expression, marital status, genetic information, protected veteran status, or other legally protected status. We are an inclusive organization and actively promote equality of opportunity for all with the right mix of talent, skills and potential. We expect every member of the Precise community to do their part to cultivate and maintain an environment where everyone has the opportunity to feel included and is afforded the respect and dignity they deserve.