Cybersecurity AI​/ML Engineer Security Clearance

Position: Cybersecurity AI/ML Engineer with Security Clearance
Job Number: R0239889 Cybersecurity AI/ML Engineer The Opportunity :
As a Cybersecurity AI/ML Engineer, you will operate as a hands-on technical contributor and engineering leader responsible for building, scaling, and operationalizing AI/ML systems that power Booz Allen's Cyber Operations teams. This role emphasizes production engineering and platform delivery, turning models, security telemetry, and analyst workflows into reliable, low-latency, observable services and pipelines that measurably improve prevention, detection, response, and recovery outcomes.

You will bridge ML engineering and security operations by translating models, threat models, and analyst needs into production-grade data and feature pipelines, training systems, inference services, and monitoring frameworks deployed across cloud, network, endpoint, identity, and application telemetry domains. You will originate, facilitate, and lead cross-functional efforts to mature AI-enabled cybersecurity capabilities, including real-time detection inference at scale, alert triage automation, LLM and agentic analyst tooling, and SOC platform integrations while guiding teams through MLSecOps, secure-AI engineering, and responsible AI practices.

Perform code and architecture reviews, provide technical direction for complex ML systems initiatives, including SIEM, SOAR, and EDR ML integrations, cloud-native ML platforms for security, and GenAI services for analysts, and translate requirements into actionable, measurable implementation plans. Leverage strong software engineering, systems, and communication skills to assess complex security and platform problems, align technical and non-technical stakeholders, and drive decisions to closure in support of Booz Allen Hamilton's critical enterprise infrastructure, go-to-market platforms, and mission operations.

The ideal candidate for our Enterprise Cybersecurity team is technically inclined, intellectually curious, and adaptable, with a strong cyber-defense mindset. They thrive in a fast-paced, dynamic environment and are continuous learners who actively seek to understand complex challenges, ask thoughtful questions, and look beyond the obvious to identify innovative and effective ways of working. They bring a security-first perspective, analytical problem-solving skills, and the curiosity and aptitude to continuously evolve as threats, technologies, and mission needs change.

This position is located in McLean, VA. What You'll Work On:
* Design, build, and deploy production AI/ML services for cybersecurity, including supervised and unsupervised detection models, anomaly and behavioral analytics, NLP on security text, retrieval-augmented generation (RAG) pipelines, agentic workflows, and LLM-assisted analyst tooling and own them end-to-end, data ingest → feature pipelines → training and tuning → packaging → deployment → serving → monitoring → retraining.

* Engineer scalable batch and streaming data and feature pipelines over security telemetry including logs, EDR, network, identity, cloud, and threat intel with online and offline parity, feature stores, schema and contract management, and reproducible datasets that power detection, triage, and hunting use cases.

* Build, harden, and operate ML platforms and inference services, including low-latency real-time scoring, batch inference, model packaging and containerization, autoscaling, canary and shadow deployments, observability, and rollback, to meet SOC throughput, latency, and reliability SLOs.

* Apply secure-AI and MLSecOps engineering practices throughout the AI/ML lifecycle, including model and data protection, prompt and inference risk mitigation, evaluation against adversarial inputs such as evasion, poisoning, and prompt injection, model and dataset supply chain security, and responsible AI controls.

* Integrate ML services and analytics into security tools and workflows such as SIEM, SOAR, EDR, IAM, or CSPM via APIs and event-driven architectures extending detection logic, enrichment, and response playbooks with custom ML/LLM capabilities where commercial tooling falls short.

* Develop automation, scripting, and infrastructure-as-code…