Enterprise Vulnerability Assessment Program- AI Focused

ecsfederal; Washington (District of Columbia); On-site; USD 160,000 - 205,000; Full time

Benefits offered by this job

Active Top Secret clearance

Enterprise vulnerability assessment工具

AI-enabled security tools

Job summary

Everforth ECS is seeking a top-tier security assessor for an AI-focused vulnerability program in Washington, DC. You will conduct comprehensive assessments across infrastructure and applications, delivering actionable recommendations and remediation guidance to a premier Law Enforcement Agency.

Required is an active Top Secret clearance with SCI eligibility. Experience with Nessus/Tenable, vulnerability management, and AI-enabled security tools is highly preferred. US citizenship required.

Qualifications

• Active Top-Secret clearance required; SCI eligibility preferred.
• Experience performing vulnerability assessments in enterprise environments.
• Experience applying AI/ML for security tooling.
• Ability to communicate technical findings to non-technical stakeholders.

Responsibilities

• Perform unbiased comprehensive vulnerability assessments and provide actionable security recommendations.
• Support vulnerability screening across infrastructure and applications.
• Leverage AI to identify system vulnerabilities.
• Communicate findings to stakeholders and assist in remediation planning.

Skills

Vulnerability assessment

Nessus/Tenable tools

AI/ML security

Top Secret clearance

Stakeholder communication

Prompt engineering

Tools

Nessus

Tenable.io

Tenable.sc

VMware vSphere

Windows

RHEL

CentOS

Job description

Everforth ECS is seeking a Top Secret Cleared AI-focused Enterprise Vulnerability Assessment Programwith deep experience in vulnerability assessments to support a premier Law Enforcement Agency in Washington, DC.

The team member will perform unbiased comprehensive assessments that produce actionable security recommendations that are tailored to the assessed environment, to include vulnerability assessment and vulnerability management.This role will support advanced vulnerability screening assessments across infrastructure and application-level vulnerabilities while leveraging AI to identify system vulnerabilities.

Active Top-Secret clearance required; SCI eligibility preferred.

Salary Range: $160,000 - $205,000

General Description of Benefits

• Active Top Secret clearance
• Ability to conduct Vulnerability Assessments using industry tools - NESSUS, Tenable, etc. Experience with Tenable (Tenable.io or Tenable.sc) in an enterprise environment highly preferred.
• Experience in vulnerability management strategies, standards, procedures and technologies across infrastructure and application-level vulnerabilities.
• Experience scanning Windows, RHEL and Centos Operating Systems and troubleshooting scans, to include the ability to communicate with customers on a daily basis describing the results of scans.
• Experience scanning Virtual environments to include VMware vSphere infrastructures, Network devices, Databases (Oracle, MSSQL, MySql, Postgres), and websites web with tenable.sc
• Intermediate to advanced knowledge of the following platforms in an enterprise environment: Windows and RHEL, routing, switching, IDS, IPS, Firewalls.
• An understanding of mapping and scanning applications and systems, including port scanning, identifying services and configurations, application flow charting, and session analysis.
• Experience leveraging AI enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
• Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.
• Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
• U.S. citizenship required due to clearance requirements.

AI/ML Security

• Model and pipeline assessment for OWASP LLM Top 10 and AI-specific threat models
• Defending AI systems: guardrails, content filtering, evaluation harnesses, monitoring
• Use of AI for offense: agent-driven recon, code analysis, payload generation, recon at scale
• Use of AI for defense: anomaly detection, alert triage, automated enrichment, LLM-assisted hunting

AI Engineering & Automation

• Building agentic workflows for triage, detection tuning, and report generation
• Fine-tuning and evaluation of security-tuned language models