Lead / Principal Information Security Engineer
Dice is the leading career destination for tech experts at every stage of their careers. Our client, Infosat IT Services LLC, is seeking the following. Apply via Dice today!Title: Lead / Principal Information Security Engineer Location: O''Fallon, Missouri (Main Campus), onsite day 1Duration: 12 MonthsJob Description SummaryJob Description SummaryAs an Information Security Engineer specializing in AI Security, you will be at the forefront of protecting our AI systems and data. Your role will involve deep technical expertise in designing, implementing, and maintaining advanced security measures to safeguard our AI infrastructure from sophisticated threats and vulnerabilities. You will be instrumental in ensuring the robustness, confidentiality, and availability of our AI-driven solutions.Key Responsibilities: Security Architecture Design: Architect and implement robust security frameworks for AI systems, including authoring of secure coding practices and secure design principles. Vulnerability Assessment: Identify, implement and manage tooling and methodologies for penetration testing on AI models and systems to identify and remediate security weaknesses. Secure AI Development: Collaborate with data scientists and software engineers to integrate security best practices into the AI development lifecycle, including secure model training, validation, and deployment. Support security engineers in the evaluation of AI systems being developed and implemented. Compliance and Standards: Keep track of emerging industry standards, regulations, and best practices for AI security, such as NIST, ISO, and GDPR. Research and Innovation: Stay abreast of the latest advancements in AI security, conduct research, and contribute to the development of innovative security solutions. Documentation and Reporting: Prepare and document standard operating procedures, protocols, and security reports, including assessment-based findings and recommendations for further system security enhancement. Advisory and Support: Provide guidance and support on security matters, including answering queries, providing feedback, and advising on best practices Technical Training and Mentorship: Provide technical training and mentorship to team members and stakeholders on AI security principles and practices. Experimentation and POCs: Design and execute experiments and proof of concepts (POCs) to validate emerging threats and security solutions. Conduct R&D to explore new methodologies and technologies for enhancing AI security.Qualifications: Bachelor''s or Master''s degree in Computer Science, Information Security, or a related field. Extensive experience in information security, with a strong focus on AI security. In-depth knowledge of AI technologies, machine learning algorithms, and data protection techniques. Proven expertise in designing and implementing security measures for AI systems, including secure coding, encryption, and access controls. Strong analytical and problem-solving skills, with the ability to conduct vulnerability assessments and penetration testing. Excellent technical communication and collaboration skills to work effectively with diverse teams. Relevant certifications such as CISSP, CEH, OSCP, or equivalent are highly desirable.Duration of assignment? Is there an anticipated opportunity for conversion or extension? 1 year; open to conversion if funding allows and skillset alignsWhat program will this person be supporting? Will this person be a part of a Guild? If so, which one and how will they be contributing? Supporting Emerging Corporate Security Solutions, I don’t think they need to be aligned to a guild. What will a typical work day look like for this contractor? What are their expected hours? Typical work day will be a mixture of the above; expected hours M-F; ~8am- ~5pm What are your top 3 required technical skills? AI Security - Model Evaluations, Implementation Evaluations Cloud Security Data Privacy/Security minded - this is a role focused on securing AI not using AI for the organizationWhat soft skills would you like to see in a candidate? Communication - important to be able to articulate findings Motivated - a lot of this work will be individual delivery; we need someone who is self-motivated who can work independently and seek assistance and guidance when needed. As well as identify areas/gaps for improvementWhat technical level of technical competency is required to fulfill this position? [please use the terms: Foundational, Intermediate, Advanced or Expert] AdvancedWhat will be your interview process? [Phone, Teams, Zoom, On-Site, 1x1, Panel Interview, # Rounds, etc.] Round 1 - Teams - 2 Engineers from Team Round 2 - Teams - Panel Review with Business Security Engineers Round 3 - Teams - Me Please outline potential interview block times to ensure candidate availability below [Suppliers are aware these are subject to change]:3PM-4PM M-Th 11AM-12PM FWhat kind of accesses will this person need? [Network & Badge or just Network]Would prefer this resource would be in office; so Network and BadgeGiven the current COVID-19 pandemic, what are your on-site expectations, are you willing to consider fully remote candidates? Prefer candidate to in an office in US; not open to fully remote at this point