Hybrid AI Security Engineer for Federal Systems & RMF

Swingtech; Washington (District of Columbia); Hybrid; USD 120,000 - 155,000; Full time

Job summary

Swingtech is seeking an AI Security Engineer for a hybrid role locally based in the Washington, DC area. The role focuses on designing and validating AI security controls across AI-enabled systems, data pipelines, and cloud services to support government authorizations and production release.

The candidate should have at least five years in cybersecurity engineering, strong RMF/ATO experience, and expertise in AI/ML security threats, vulnerability management, and secure DevSecOps practices.

Qualifications

• Bachelor's degree in a relevant field is required.
• Minimum five years in cybersecurity engineering or related roles.
• Experience with FISMA, NIST RMF/ATO, FedRAMP, and cloud security.
• Ability to secure AI/ML pipelines, models, and data flows.
• Strong communication with technical and government stakeholders.

Responsibilities

• Design AI security architecture, threat models, and control matrices.
• Implement AI security controls across LLMs, data pipelines, APIs, and CI/CD.
• Conduct AI-specific security testing (prompt injection, data poisoning, etc.).
• Support RMF/ATO activities and prepare SSPs, SARs, and POA&Ms.
• Coordinate security incidents and contribute to IR planning and post-incident reviews.

Skills

Security architecture

Threat modeling

RMF/ATO experience

AI/ML security knowledge

Vulnerability management

Incident response

Cloud security

Communication

On-site coordination

Education

Bachelor's degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field

Tools

SIEM/SOAR

SAST/DAST

SBOMs

CSPM

Secrets management

FedRAMP knowledge

OWASP AI Top 10

Job description

Swingtech is seeking an AI Security Engineer for a hybrid role locally based in the Washington, DC area. The role focuses on designing and validating AI security controls across AI-enabled systems, data pipelines, and cloud services to support government authorizations and production release.

The candidate should have at least five years in cybersecurity engineering, strong RMF/ATO experience, and expertise in AI/ML security threats, vulnerability management, and secure DevSecOps practices.