[Remote] AI Security Engineer - Mid-Atlantic region (Remote in VA, MD, PA, NC, DE, NJ, or DC)

Note: The job is a remote job and is open to candidates in USA. GuidePoint Security is a leading provider of cybersecurity expertise and solutions, helping organizations manage risk effectively. They are seeking an AI Security Engineer to assist in designing, implementing, and managing secure generative AI solutions while collaborating with various teams to ensure optimal security practices are followed.ResponsibilitiesAdvise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure — identifying vulnerabilities, attack surfaces, and gaps against industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS)Lead threat modeling exercises specific to AI workloads, covering adversarial inputs, prompt injection, model inversion, data poisoning, and supply chain risks across SaaS, self-hosted, and local AI deploymentsAdvise internal teams on securely integrating SaaS AI services and APIs (e.g., OpenAI, Azure OpenAI, Bedrock) into enterprise applications, including safe handling of credentials, outputs, and user dataEvaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases to prevent unauthorized data exposure, leakage through model outputs, or non-compliant data processingServe as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams on all matters related to AI risk and securityContinuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories to keep client guidance relevant and proactiveProduce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environmentContribute to the development of a long-term AI security strategy, including prioritized remediation roadmaps, capability maturity assessments, and investment recommendationsDevelop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks, responsible AI usage, and secure development practices for AI-powered applicationsSkills5+ years of experience in security engineering with a significant focus on cloud security and/or AppSecHands-on experience implementing, managing, securing, and supporting Agentic AI solutions within an enterprise contextFamiliarity with major cloud service provider AI-focused services such as AWS Bedrock, AWS SageMaker, Azure AI Foundry, or Google VertexProficiency in at least one relevant programming language, preferably PythonSolid understanding of generative AI concepts, Large Language Models (LLMs), context engineering, agentic tool usage, and foundational AI/ML principlesDeep knowledge and real operational experience in the usage of Agentic Coding assistants like Claude Code, Open Code, Cursor, or CodexStrong written and oral communication and interpersonal skills, with the ability to explain complex technical concepts to both technical and non-technical audiencesDemonstrated experience applying security principles to AI implementations, including data protection, access controls, and threat modeling for AI systemsUnderstanding of AI-specific security challenges including prompt injection, data poisoning, supply chain security, and model extraction attacksCertifications such as: AWS Certified AI Practitioner/AWS Certified Machine Learning Engineer, Azure AI Engineer Associate, Claude Certified ArchitectUnderstanding or experience with model fine-tuning techniquesFamiliarity with red teaming of agentic systemsExperience with policy as code languages like Cedar or Rego and Infrastructure as Code (IaC) tools like AWS CloudFormation, Terraform, OpenTofu, or equivalent technologiesExperience designing and implementing agentic AI architectures that balance security and autonomyFamiliarity with MCP client/server architecture vs. agentic skills and the associated security risks of eachBenefitsRemote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans12 corporate holidays and a Flexible Time Off (FTO) programHealthy mobile phone and home internet allowanceEligibility for retirement plan after 2 months at open enrollmentPet Benefit OptionCompany OverviewGuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations minimize risk. It was founded in 2011, and is headquartered in Reston, Virginia, USA, with a workforce of 1001-5000 employees. Its website is https://www.guidepointsecurity.com/.