Agentic AI Security Engineer, Lead
Booz Allen Hamilton
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Booz Allen Hamilton in the United States seeks an Agentic AI Security Engineer Lead to design, build, and evaluate secure AI applications and agentic workflows. You will examine models, orchestration, memory, and data flows to implement practical security controls across the system lifecycle.
This leadership role requires 8+ years in software/AI engineering, strong Python, experience with LLMs and agent frameworks, cybersecurity expertise, and ability to obtain a Secret clearance.
Qualifications
- 8+ years in software or AI/ML engineering and deployment of AI/ML systems.
- Strong Python skills and software engineering practices (Git, tests, reviews).
- Experience with LLMs, tool use, retrieval augmented generation, agent orchestration.
- Knowledge of system architectures with APIs, data pipelines, and integrations.
- Security-minded development with IAM, trust boundaries, data handling and threat modeling.
- Familiarity with NIST/AI RMF and Zero Trust concepts; willingness to obtain clearance.
Responsibilities
- Design and validate secure architectures for AI apps, agents, and multi-agent systems.
- Develop prototypes to demonstrate security controls and evaluate tradeoffs.
- Assess AI systems for risks like prompt injection, data exposure, and unsafe tool use.
- Implement controls for identity, least privilege, isolation, and data protection.
- Create architecture diagrams, data flows, and documentation of requirements.
- Establish monitoring for agent behavior, security, and policy compliance.
- Translate security requirements into engineering practices, tests, and audits.
- Provide day-to-day technical leadership and guide architectural decisions.
Skills
Education
Tools
Job description
As organizations adopt AI systems that can reason, use tools, and take action, they need engineers who understand both how these systems work and how to secure them. We’re looking for an AI/ML engineer who can combine hands‑on development, security expertise, and architectural thinking to help our customers deploy agentic AI securely and responsibly. As a security‑focused AI/ML Engineer on our team, you’ll design, build, and evaluate secure AI applications and agentic workflows. You’ll examine how models, agent orchestration, tools, data sources, and enterprise infrastructure interact, identify security risks, and develop practical controls throughout the system lifecycle. You’ll turn emerging research and complex technical requirements into working prototypes, reusable architecture patterns, and clear technical guidance. You’ll collaborate with AI engineers, cybersecurity specialists, architects, and mission stakeholders to develop solutions that balance capability, security, and operational needs. Your work will help technology leaders and implementation teams understand how to move from AI experimentation to secure, governed deployment.
Design and validate secure architectures for generative AI applications, AI agents, and multi‑agent systems, including model access, orchestration, tool execution, memory, and retrieval augmented generation.
Develop prototypes and reference implementations to demonstrate security controls and evaluate architectural tradeoffs.
Assess AI systems for risks such as prompt injection, sensitive data exposure, excessive permissions, unsafe tool execution, and compromised integrations.
Design and implement controls for agent identity, least privilege access, execution isolation, tool authorization, data protection, and human approval of consequential actions.
Develop architecture diagrams, data flow diagrams, trust boundary models, and technical documentation that explain system behavior, control placement, and implementation requirements.
Establish evaluation and monitoring approaches for agent behavior, security, reliability, and policy compliance, including traceability across model interactions and tool calls.
Translate security and governance requirements into engineering practices, including testing, version control, change management, audit trails, and rollback procedures.
Evaluate emerging models, agent frameworks, integration protocols, and security tools, and communicate findings and recommendations to technical and non‑technical audiences.
Provide day‑to‑day technical leadership to engineers. Conduct design reviews, guide architectural decisions, and raise the overall technical bar of the team.
- 8+ years of experience in software engineering or AI/ML engineering, including developing and deploying AI/ML systems
- Experience developing in Python and applying software engineering practices, including Git, automated testing, code review, and dependency management
- Experience building applications using large language models, including tool use, retrieval augmented generation, and agent orchestration
- Experience designing or evaluating system architectures involving APIs, data pipelines, model services, and enterprise integrations
- Experience applying cybersecurity principles to software or AI systems, including identity and access management, trust boundaries, secure data handling, and threat modeling
- Experience with traditional ML approaches and algorithms and their applications to cybersecurity
- Knowledge of NIST security and risk management frameworks, including SP 800‑53 and AI Risk Management Framework, and Zero Trust Architecture principles, including identity‑based access, least privilege, and continuous verification
- Knowledge of AI‑specific security risks and approaches for evaluating and mitigating vulnerabilities in generative AI and agentic systems
- Ability to obtain a Secret clearance
- Bachelor’s degree in CS, Mathematics, Engineering, or Cybersecurity
- Experience developing agentic AI applications using frameworks or platforms such as Strands Agents, LangGraph, Amazon Bedrock, GraphRAG, or comparable technologies, including integrating agents with workflow orchestration tools such as Temporal
- Experience securing tool integrations using Model Context Protocol or other agent communication and integration mechanisms
- Experience conducting AI red teaming, adversarial testing, or automated security evaluations of models and agentic workflows
- Experience implementing AI gateways, policy enforcement, execution sandboxes, agent observability, or human‑in‑the‑loop controls
- Experience deploying AI applications in cloud or on‑premises environments using containers, CI/CD pipelines, and Infrastructure‑as‑Code
- Experience with model training, fine‑tuning, evaluation, or serving using frameworks such as PyTorch or comparable technologies
- Experience with distributed computing, data engineering, feature pipelines, or relational and vector databases
- Experience applying NIST guidance and Zero Trust Architecture principles to AI systems, and translating security requirements into architectural controls, implementation patterns, and assessment evidence
- TS/SCI clearance
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well‑being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work‑life programs, and dependent care.
- health
- life
- disability
- financial
- retirement benefits
- paid leave
- professional development
- tuition assistance
- work‑life programs
- dependent care
Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees.
This posting will close within 90 days from the Posting Date.
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in‑person or virtual) is prohibited unless permission is explicitly provided.
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen or customer facility, in alignment with your leadership's expectations and the needs of the role.
Onsite: If this position is listed as onsite, work will primarily be performed full‑time at a customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.
Booz Allen is an advanced technology company. We build commercial‑grade products and solutions for America’s most critical defense, civil, and national security priorities.
Applicants who need a reasonable accommodation for any part of the application, hiring, or employment process because of a disability, a sincerely held religious belief, practice, or observance, or as otherwise required by applicable law should contact the Booz Allen Help Desk by calling 1-877-927-8278 or sending an email to helpdesk@bah.com. We will review requests on an individualized basis and provide reasonable accommodations consistent with applicable law.
For more information on how Booz Allen uses your information, please see our Careers Privacy Policy.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
