Senior AI Security Architect – FedRAMP/Cloud

Swingtech; Washington; On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

15 PTO days

11 paid holidays

Medical Insurance options with HSA

Job summary

Swingtech is seeking an AI Security Engineer to design, assess, and implement cybersecurity controls for DOL AI systems. You will secure AI-enabled applications, data pipelines, models, and cloud services, ensuring evidence-based authorization and production release.

The role requires experience with RMF/ATO, FISMA, and FedRAMP, plus strong skills in threat modeling, testing, and secure software practices. Onsite work three days a week at a customer site in Washington, DC, is expected.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information assurance, engineering, information systems, or a related field.
• At least five years of experience in cybersecurity engineering, cloud security, application security, DevSecOps, security architecture, RMF/ATO, or comparable technical security roles.
• Experience with Federal cybersecurity frameworks including FISMA, NIST SP 800-53/171, FIPS 199/200, FedRAMP, and RMF/ATO.
• Experience securing cloud apps, APIs, data platforms, CI/CD pipelines, identity services, and cloud-native systems.
• Experience with vulnerability management, security logging and monitoring, incident response, security testing, and security documentation.
• Working knowledge of AI/ML security threats (prompt injection, model compromise, data poisoning, etc.).
• Strong communication skills and ability to coordinate with engineering, privacy, governance, and Government stakeholders.
• Willingness to work 3 days onsite at customer site in Washington, DC.

Responsibilities

• Develop and implement AI security architecture, threat models, control matrices, security requirements, abuse cases, test plans, and remediation plans.
• Implement and validate security controls across AI applications, LLM integrations, data pipelines, model endpoints, RAG systems, and APIs.
• Conduct AI-specific security testing including prompt injection, jailbreaks, data poisoning, and retrieval manipulation.
• Apply Zero Trust, least privilege, RBAC, FIPS-validated encryption, secrets management, audit logging, and secure SDLC practices.
• Support FISMA, RMF, and ATO activities with SSPs, SAPs, SARs, POA&Ms, and continuous monitoring.
• Coordinate security incident investigations, containment, mitigation, and reporting.
• Collaborate with engineering teams to integrate security into development, testing, deployment, and production operations.

Skills

Cybersecurity engineering

Cloud security

Application security

DevSecOps

Security architecture

RMF/ATO

Communication skills

Stakeholder coordination

Education

Bachelor's degree in cybersecurity, computer science, information assurance, engineering, information systems, or related field

Tools

SIEM/SOAR

CSPM

SAST/DAST

SBOMs

Cloud security posture management

Job description

Swingtech is seeking an AI Security Engineer to design, assess, and implement cybersecurity controls for DOL AI systems. You will secure AI-enabled applications, data pipelines, models, and cloud services, ensuring evidence-based authorization and production release.

The role requires experience with RMF/ATO, FISMA, and FedRAMP, plus strong skills in threat modeling, testing, and secure software practices. Onsite work three days a week at a customer site in Washington, DC, is expected.