Senior AI Engineer, Security Infrastructure

The posting, as Air wrote it

Company Description

Air is the leader in Enterprise Readiness. Our mission is to establish readiness as a real-time condition that is continuously achieved. Today, a dangerous Readiness Gap exists between what the front line needs and what is delivered. Our AI-native platform, Air Enterprise Readiness, aligns development, production, delivery, and sustainment into one coordinated execution system for government agencies and industrial suppliers. By revealing true capacity, exposing real constraints, coordinating resources, and executing at the speed of operational demands, the front line gets what it needs to succeed.

Job Description

We are seeking an experienced Senior AI Engineer specializing in AI security to join our Agentic AI team as we scale our agentic capabilities across all levels of the U.S. government.
Over the past year, we have seen rapid adoption of our AI agent, Ace. As agents gain access to increasingly powerful tools, data, and workflows, securing these systems presents a fundamentally different set of challenges from securing traditional software.

AI security is not a solved problem. This role sits at the intersection of applied AI research, offensive security, and production systems engineering. You will identify how agentic systems can fail or be exploited, develop new approaches for detecting and mitigating those failures, and build the infrastructure necessary to deploy capable AI agents securely in adversarial environments.

You will work directly with the engineers building our agent runtime, evaluation infrastructure, tools, and production AI systems. The goal is not simply to identify vulnerabilities - it is to turn what we learn into durable security architecture, automated evaluations, and engineering primitives that make our entire AI platform more secure.

This role is a full-time position located out of our office in Pittsburgh, PA or Arlington, VA and Remote for those outside of those cities.

This role may require up to 25% travel

Scope of Responsibilities

• Research and develop new approaches to AI red teaming, adversarial testing, security evaluation, and robust inference.
• Threat model agentic AI architectures, identifying trust boundaries, attack surfaces, privileged capabilities, and potential failure modes.
• Design adversarial evaluations targeting threats such as prompt injection, indirect prompt injection, tool abuse, privilege escalation, data exfiltration, context or memory poisoning, and unintended agent behavior.
• Build automated security evaluation and regression frameworks that continuously test agents, models, tools, and infrastructure against known and emerging attacks.
• Translate successful attacks and research findings into production mitigations, architectural improvements, and reusable security controls.
• Design secure execution environments for AI agents interacting with tools, code, data, and external systems.
• Build and harden sandboxing and isolation mechanisms for e

[…]
ve between research and engineering: reading new research, developing an attack or defense, validating it experimentally, and turning the result into a production system.

• Passionate about building secure AI systems and proactively defending against novel attack vectors.

Desired Skills

• Experience designing or securing AI agent runtimes and tool-execution environments.
• Experience building secure code execution sandboxes, container isolation, microVMs, or other mechanisms for running untrusted workloads.
• Experience with cloud security, infrastructure hardening, IAM, secrets management, network isolation, and zero-trust architectures.
• Experience with offensive security, penetration testing, vulnerability research, or exploit development.
• Experience developing automated adversarial evaluations or integrating security evaluations into CI/CD pipelines.
• Experience with adversarial machine learning, model robustness, or inference-time defenses.
• Familiarity with AI security frameworks and threat taxonomies such as MITRE ATLAS, OWASP guidance for LLM/GenAI applications, or the NIST AI Risk Management Framework.
• Experience securing RAG systems, vector stores, model gateways, or other components of modern AI infrastructure.
• Experience with software supply-chain security and securing model, dependency, and container artifacts.
• Experience working in government, defense, or other high-security environments.

We firmly believe that past performance is the best indicator of future performance. If you thrive while building solutions to complex problems, are a self-starter, and are passionate about making an impact in global security, we’re eager to hear from you.

Air is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability and protected veterans status or any other characteristic protected by law.