AI Fullstack Engineer- level 5

AI Engineer For Threat Modeling

Location: Charlotte NC, Irving TX, Iselin NJ, Chandler AZ

Pay Range: $75.00-85.00 w2

Hybrid 3x a week onsite in office

What's The Job?

AI Engineering for Threat Modeling

This role builds scalable, AI-assisted threat modeling capability that produces consistent, high-quality security insight and audit-ready outputs.

• Design and build AI-powered threat modeling capabilities, including:
  • LLM-driven identification of threats, abuse cases, and attack paths
  • Automated mapping of system designs to risk scenarios and control gaps
• Develop and operationalize:
  • Prompt frameworks and models that generate consistent, reviewable threat models
  • Integration of threat modeling into CI/CD and architecture workflows
• Ensure AI outputs are:
  • Validated, explainable, and aligned to enterprise security standards
  • Mitigate risks in AI-assisted modeling (e.g., hallucinations, incomplete coverage) through guardrails, validation layers, and human-in-the-loop design

Cryptography & Control Assurance

• Automate validation of crypto standards, key management, and lifecycle controls
• Detect control drift pre-deployment, not during audit

Evidence-Ready Security Outputs

• Generate consistent, defensible artifacts for audit, DCMS, and regulatory review
• Eliminate gaps from one-time or manual assessments

Precision & Enablement

• Optimize signal-to-noise ratio to reduce false positives and alert fatigue
• Partner early with engineering to prevent rework and delivery slowdowns

Required Skill Set

Security Engineering

• Deep expertise in application/cloud security, threat modeling, and cryptography
• Strong experience with abuse case development and attacker mindset modeling
• Ability to reason about risk and control effectiveness, not just tool output

AI / LLM Engineering for Security

• Experience building or applying AI/LLM systems to:
  • Threat modeling, code analysis, or security decision support
• Strong understanding of:
  • Prompt design, evaluation, and output validation
  • Limitations of AI systems (hallucination, bias, incomplete reasoning)
• Ability to translate security knowledge into repeatable, AI-driven modeling frameworks

Automation & Engineering

• Strong programming experience (Python, Go, or similar)
• Experience integrating AI or security automation into:
  • CI/CD pipelines and developer workflows
  • Cloud and IaC-based environments

Control & Audit Alignment

• Experience mapping threats and controls to:
  • Security frameworks, control objectives, and audit requirements
• Design outputs that withstand independent reviewer scrutiny

What This Role Is Not

• Not manual threat modeling or documentation-heavy reviews
• Not a tooling-only or prompt-only role
• Not vendor- or SOW-dependent