AI Security Engineer

Ampcus, Inc; Gaithersburg (MD); On-site; USD 100,000 - 130,000; Full time

Job summary

A global technology consulting firm in Gaithersburg is seeking an AI Security Engineer to manage and maintain security measures across AI applications and models. Responsibilities include ensuring compliance in model vulnerabilities, running attack simulations, and maintaining security environments. The ideal candidate will be responsible for developing organizational policies on acceptable risks. This position offers a challenging opportunity to work at the forefront of AI security in a collaborative environment.

Responsibilities

• Maintain AZ's internal model scanning pipeline infrastructure and ensure compliance with governance systems.
• Review output from the model scanner to ensure it meets requirements.
• Set organizational policy around acceptable risk in model vulnerabilities.
• Maintain AIAS tasks implemented into application pipelines.
• Review attack simulation results and determine risk levels.
• Maintain the self-hosted HiddenLayer environment for application availability.
• Review alerts and escalations from HiddenLayer and take appropriate action.

Job description

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: AI Security Engineer.

Location: Gaithersburg, MD.

Job Responsibilities

After the implementation phase, the resources will be operationally responsible for the following:

• Supply Chain Security/Model Scanner (SaaS self-hosted hybrid deployment)
  • Maintaining AZ's internal model scanning pipeline infrastructure and ensuring continued appropriate ingestion in compliance and governance systems (in the case of self-hosted deployment) monitoring container releases and updates).
  • Reviewing output from the model scanner to ensure it is meeting requirements.
  • Setting organizational policy around "acceptable" risk in model vulnerabilities and providing internal guidance and overrides where necessary.
• AI Attack Simulation (SaaS-only)
  • Maintaining AIAS tasks that are implemented into application pipelines.
  • Adding AIAS tasks to new applications or running on-demand attack simulations.
  • Reviewing attack simulation results and determining application risk levels.
  • Setting organizational policy around "acceptable" risk in applications and providing remediation guidance to application teams.
• Runtime Security/AIDR (self-hosted hybrid deployment)
  • Maintaining the self-hosted HiddenLayer environment and ensuring availability for AZ applications (via the proposed AI/LLM Gateway).
  • Ensuring continued appropriate ingestion of runtime logs and results in SIEMs and SoRs.
  • Monitoring container releases and updates.
  • Setting organizational policy around runtime behavior (blocking vs alerting) in applications.
  • Determining alerting thresholds and appropriate warning or escalation behavior for identified runtime misuse/attacks.
  • Reviewing alerts and escalations from HiddenLayer and taking appropriate action (remediation, tuning policy for specific applications, etc.).
  • Ensuring that new applications are appropriately protected by HL Runtime Security (via the proposed AI/LLM Gateway).

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.