<div class="content-intro"><p>GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation’s top organizations, such as Fortune 500 companies and U.S. government agencies, to identify threats, optimize resources and integrate best-fit solutions that mitigate risk.</p></div><h2><span style="font-size: 10pt;">General Description</span></h2> <p><span style="font-size: 10pt;">GuidePoint Security is seeking a skilled AI Security Engineer to join our growing AI Security Services team. You will be assisting customers in the design, implementation, security, and operational management of generative AI security solutions. You will work closely with peers across multiple domains including AppSec, Cloud Security, and Vulnerability Management to deliver holistic and secure solutions adhering to industry best practices. This role offers the exciting opportunity to contribute to our growing AI security practice.</span></p> <h3><span style="font-size: 10pt;">Roles and Responsibilities</span></h3> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>AI Security Architecture & Assessment:</strong> Advise on and assess the security posture of AI/ML systems, including LLMs, GenAI pipelines, and model serving infrastructure — identifying vulnerabilities, attack surfaces, and gaps against industry frameworks (e.g., OWASP LLM Top 10, MITRE ATLAS).</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Threat Modeling for AI Systems:</strong> Lead threat modeling exercises specific to AI workloads, covering adversarial inputs, prompt injection, model inversion, data poisoning, and supply chain risks across SaaS, self-hosted, and local AI deployments.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Secure AI Integration Guidance:</strong> Advise internal teams on securely integrating SaaS AI services and APIs (e.g., OpenAI, Azure OpenAI, Bedrock) into enterprise applications, including safe handling of credentials, outputs, and user data.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Data Security & Privacy Controls:</strong> Evaluate and recommend controls for data ingestion pipelines, RAG architectures, and vector databases to prevent unauthorized data exposure, leakage through model outputs, or non-compliant data processing.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Collaboration & Stakeholder Engagement:</strong> Serve as a trusted security advisor bridging business stakeholders, AI/ML engineers, IT operations, and information security teams on all matters related to AI risk and security.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Stay Current on AI Threat Landscape:</strong> Continuously track emerging AI security research, adversarial techniques, regulatory developments, and vendor security advisories to keep client guidance relevant and proactive.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Security Documentation & Standards:</strong> Produce and maintain security architecture documentation, risk assessments, control frameworks, and guidelines tailored to the organization's AI environment.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Strategic AI Security Roadmap:</strong> Contribute to the development of a long-term AI security strategy, including prioritized remediation roadmaps, capability maturity assessments, and investment recommendations.</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;"><strong>Security Awareness & Education:</strong> Develop and deliver training and awareness content for technical and non-technical stakeholders on AI-specific risks, responsible AI usage, and secure development practices for AI-powered applications.</span></li> </ul> <h3><span style="font-size: 10pt;">Required Experience</span></h3> <ul> <li style="font-size: 10pt;"><span style="font-size: 10pt;">5+ years of experience in security engineering with a significant focus on cloud security and/or AppSec</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Hands-on experience implementing, managing, securing, and supporting Agentic AI solutions within an enterprise context</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Familiarity with major cloud service provider AI-focused services such as AWS Bedrock, AWS SageMaker, Azure AI Foundry, or Google Vertex</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Proficiency in at least one relevant programming language, preferably Python</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Solid understanding of generative AI concepts, Large Language Models (LLMs), context engineering, agentic tool usage, and foundational AI/ML principles</span></li> <li style="font-size: 10pt;"><span style="font-size: 10pt;">Deep knowledge and real operational experience in the usage of Agentic Coding assistants like Claude Code, Open Code, Cursor, or Codex</span></li> <li style="font-size: 10pt;"><s