Enterprise Vulnerability Assessment Program- AI Focused

Everforth ECS is seeking a Top Secret Cleared AI-focused Enterprise Vulnerability Assessment Program with deep experience in vulnerability assessments to support a premier Law Enforcement Agency in Washington, DC.

The team member will perform unbiased comprehensive assessments that produce actionable security recommendations that are tailored to the assessed environment, to include vulnerability assessment and vulnerability management. This role will support advanced vulnerability screening assessments across infrastructure and application-level vulnerabilities while leveraging AI to identify system vulnerabilities.

Active Top-Secret clearance required; SCI eligibility preferred.

Salary Range: $160,000 - $205,000

General Description of Benefits

• Active Top Secret clearance
• Ability to conduct Vulnerability Assessments using industry tools - NESSUS, Tenable, etc. Experience with Tenable (Tenable.io or Tenable.sc) in an enterprise environment highly preferred.
• Experience in vulnerability management strategies, standards, procedures and technologies across infrastructure and application-level vulnerabilities.
• Experience scanning Windows, RHEL and Centos Operating Systems and troubleshooting scans, to include the ability to communicate with customers on a daily basis describing the results of scans.
• Experience scanning Virtual environments to include VMware vSphere infrastructures, Network devices, Databases (Oracle, MSSQL, MySql, Postgres), and websites web with tenable.sc
• Intermediate to advanced knowledge of the following platforms in an enterprise environment: Windows and RHEL, routing, switching, IDS, IPS, Firewalls.
• An understanding of mapping and scanning applications and systems, including port scanning, identifying services and configurations, application flow charting, and session analysis.
• Experience leveraging AI enabled tools, assessing or securing AI/ML systems, large language model integrations, or AI-enabled applications.
• Ability to communicate highly technical issues clearly to both technical and non-technical stakeholders.
• Prompt engineering to optimize AI-driven security tools, and familiarity with prompt injection/jailbreaking defensive mitigation strategies.
• U.S. citizenship required due to clearance requirements.

AI/ML Security

• Model and pipeline assessment for OWASP LLM Top 10 and AI-specific threat models
• Defending AI systems: guardrails, content filtering, evaluation harnesses, monitoring
• Use of AI for offense: agent-driven recon, code analysis, payload generation, recon at scale
• Use of AI for defense: anomaly detection, alert triage, automated enrichment, LLM-assisted hunting

AI Engineering & Automation

• Building agentic workflows for triage, detection tuning, and report generation
• Fine-tuning and evaluation of security-tuned language models