Senior AI Red Team Engineer — Security & Threat Modeling

Socket.dev; Reston (VA); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

PPO medical coverage

Vision and dental insurance

401(k) matching

Pet insurance discount

Employee Assistance Program (EAP)

Generous PTO and holidays

Education assistance after 12 months

Job summary

PGTEK is seeking a Sr. Agent Security / AI Red-Team Engineer to support our L400 Advanced Development capability. You will attack our agents before adversaries do—and turn findings into durable controls for regulated and high-consequence environments.

Role involves threat modeling, AI red teaming, and Model Armor, IAM, secure tool calling, plus MCP/A2A security. Hybrid or remote with travel to client sites (~10–25%). Washington, DC / Northern Virginia area preferred.

Qualifications

• 5+ years of software, cloud, data, cybersecurity, systems, or AI engineering experience.
• 3+ years of advanced hands-on experience in production or regulated environments.
• Experience with prompt injection, AI red teaming, Model Armor, IAM, secure tool calling, MCP/A2A security, Python, and incident response.

Responsibilities

• Threat-model prompts, retrieval, tools, memory, MCP/A2A, and identities.
• Execute attacks and verify remediation.
• Design solutions using prompt injection testing, AI red teaming, Model Armor, IAM, secure tool calling, and MCP/A2A security.
• Mentor team members and contribute reusable security standards.
• Support RMF/FedRAMP/DoD authorization activities.

Skills

Prompt injection

AI red-teaming

Model Armor

IAM

Secure tool calling

MCP/A2A security

Python

Incident response

Tools

Model Armor

Secure tool calling

Job description

PGTEK is seeking a Sr. Agent Security / AI Red-Team Engineer to support our L400 Advanced Development capability. You will attack our agents before adversaries do—and turn findings into durable controls for regulated and high-consequence environments.

Role involves threat modeling, AI red teaming, and Model Armor, IAM, secure tool calling, plus MCP/A2A security. Hybrid or remote with travel to client sites (~10–25%). Washington, DC / Northern Virginia area preferred.