AI Security and Assurance Technical Lead

This role serves as the senior cybersecurity and DevSecOps lead responsible for integrating security, risk management, and compliance across data, AI, and software delivery efforts. The position ensures Government security requirements are translated into actionable engineering practices, oversees RMF and authorization support activities, and directs continuous security monitoring throughout the system lifecycle. Working closely with technical leads, regional teams, and Government stakeholders, this role drives secure implementation, risk-informed decision-making, and enterprise-wide consistency in support of mission-critical capabilities.

• Translate Government security requirements into contractor engineering practices, security acceptance criteria, and reusable control evidence across the enterprise hub, regional teams, and resident command teams.
• Identify and assess risks introduced by data and AI capabilities. Direct threat modeling and security testing covering data and model integrity, unauthorized disclosure, adversarial manipulation, and software supply-chain dependencies.
• Lead Risk Management Framework (RMF) artifact development with Information Systems Security Officers and Security Control Assessor Representatives. Coordinate assessments and prepare evidence supporting authorization to test, connect, and operate.
• Direct implementation and management of continuous integration and continuous delivery (CI/CD) security capabilities supporting DevSecOps. Embed vulnerability detection, automated security testing, and remediation verification into delivery workflows.
• Coordinate with the Data Operations Technical Lead on data protection, access controls, and secure infrastructure, and with the Data Science and Analytics Technical Lead and other task leads on AI-specific risks, experimentation, release readiness, and sustainment.
• Oversee continuous security-control monitoring and risk reassessment. Maintain actionable remediation priorities, control evidence, and security transition information for each supported capability.
• Provide technical direction and coaching to assigned cybersecurity, RMF, and DevSecOps personnel. Work through regional management teams to correct security nonconformance and align local execution with enterprise requirements.
• Report security risks, authorization dependencies, and remediation status to the Program Manager and Government stakeholders. Recommend corrective action and document security concurrence for contractor release reviews.