Hybrid AI Security Engineer — Federal AI & Cloud Security

Swingtech; Washington (District of Columbia); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Health Insurance

401k with company match

Training budget

Referral bonus

Disability & Life Insurance

Job summary

Swingtech is seeking an AI Security Engineer to design, assess, and strengthen cybersecurity controls for AI systems across government domains. You will craft threat models, implement robust security requirements, and supervise evidence for FedRAMP and RMF compliance.

The role includes hands-on testing of prompts, data handling, and secure software practices. Ideal candidates bring 5+ years in cybersecurity engineering, cloud security, and DevSecOps, with strong collaboration skills for

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
• At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
• Experience with Federal cybersecurity frameworks, including FISMA, NIST SP 800-53, NIST SP 800-171, FIPS 199, FIPS 200, FedRAMP, and RMF/ATO.
• Experience securing cloud applications, APIs, data platforms, CI/CD pipelines, identity services, and containerized or cloud-native systems.
• Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
• Working knowledge of AI/ML security threats, including prompt injection, jailbreaking, model compromise, model extraction, data poisoning, RAG poisoning, retrieval manipulation, and AI supply-chain risks.
• Strong communication skills and ability to coordinate with engineering, privacy, governance, security, program-management, and Government stakeholders.
• Must be willing to work 3 days onsite at customer site in Washington, DC.

Responsibilities

• Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
• Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, vector stores, MCP servers, APIs, orchestration services, and CI/CD pipelines.
• Conduct AI-specific security testing, including prompt injection, jailbreaks, malicious-input attacks, retrieval manipulation, data poisoning, model extraction, model inversion, credential compromise, access-control bypass, insecure output handling, and tool-abuse scenarios.
• Apply Zero Trust, least privilege, role-based access, FIPS-validated encryption, secrets management, audit logging, secure configuration, vulnerability management, and secure software-development practices.
• Support FISMA, RMF, and ATO activities, including security categorization, system boundaries, SSPs, SAPs, SARs, POA&Ms, continuous monitoring, security assessments, risk decisions, and remediation evidence.
• Support assessment and approval of AI models, third-party AI services, cloud services, model providers, APIs, tools, and data-handling practices before their integration into DOL systems.
• Validate that approved cloud AI services satisfy applicable FedRAMP requirements and DOL authorization expectations.
• Ensure PII, CUI, prompts, retrieval context, embeddings, model outputs, logs, backups, and evaluation data are protected through approved controls.
• Support AI Incident Response Plan development and maintenance, including escalation paths, evidence preservation, reporting templates, severity classification, containment procedures, and post-incident review.
• Coordinate security incident investigation, containment, mitigation, recovery, and reporting for suspected or confirmed security events.
• Support supply-chain security, Software Bill of Materials generation, dependency scanning, secure-development attestations, vulnerability remediation, and third-party risk management.
• Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.

Skills

Cybersecurity engineering

Cloud security

DevSecOps

Security architecture

RMF/ATO

Vulnerability management

AI/ML security

Communication skills

Education

Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field

Tools

SAST/DAST

SIEM/SOAR

SBOMs

Cloud security tooling

Job description

Swingtech is seeking an AI Security Engineer to design, assess, and strengthen cybersecurity controls for AI systems across government domains. You will craft threat models, implement robust security requirements, and supervise evidence for FedRAMP and RMF compliance.

The role includes hands-on testing of prompts, data handling, and secure software practices. Ideal candidates bring 5+ years in cybersecurity engineering, cloud security, and DevSecOps, with strong collaboration skills for