Cybersecurity AI Development & Testing Engineer_GS

Job Description

• Develop AI/LLM-enabled cybersecurity solutions and perform security testing across software, embedded systems, hardware, and security workflows. 开发基于 AI/大语言模型的网络安全解决方案，并面向软件、嵌入式系统、硬件和安全流程开展安全测试。

Key Responsibilities / 主要职责

• Develop AI/LLM-enabled cybersecurity tools, agents, workflows, and knowledge solutions. 开发基于 AI/大语言模型的网络安全工具、agents、工作流和知识解决方案。

• Perform vulnerability assessments and security testing across networks, operating systems, embedded systems, firmware, and hardware interfaces. 面向网络、操作系统、嵌入式系统、固件和硬件接口开展漏洞评估与安全测试。

• Improve cybersecurity services through automation, reusable assets, and technical innovation.通过自动化、可复用资产和技术创新持续改进网络安全服务。

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, AI, Engineering, or a related field. 计算机、网络安全、人工智能、工程类或相关专业本科及以上学历。

• Hands-on experience in AI/LLM application development, such as agents, skills, prompt engineering, RAG, or AI automation. 具备 AI/大语言模型应用开发经验，例如 agents、Skills、提示词工程、RAG 或 AI 自动化。

• Solid understanding of cybersecurity fundamentals, secure software development, authentication, access control, network security, operating-system security, or embedded security. 扎实掌握网络安全基础、安全软件开发、身份认证、访问控制、网络安全、操作系统安全或嵌入式安全。

• Practical experience in vulnerability assessment, penetration testing, or exploit development. 具备漏洞评估、渗透测试、或漏洞利用开发实践经验。

• Proficiency in Python; knowledge of C/C++, Shell, or similar languages is a plus. 熟练掌握 Python；了解 C/C++、Shell 或类似语言者优先。

• Strong English communication skills and the ability to collaborate in an international environment. 具备良好的英语沟通能力，能够在国际化环境中高效协作。

Preferred Qualifications / 加分条件

• Experience with security testing tools, scanners, debuggers, disassemblers, or firmware-analysis frameworks. 熟悉安全测试工具、扫描器、调试器、反汇编工具或固件分析框架。

• Knowledge of cloud security, automotive cybersecurity, embedded Linux, secure boot, HSM, CAN, or UDS. 了解云安全、汽车网络安全、嵌入式 Linux、安全启动、HSM、CAN 或 UDS。

• Experience building cybersecurity platforms, automation frameworks, or proof-of-concept solutions. 具备网络安全平台、自动化框架或 PoC 解决方案开发经验。

• Relevant certifications such as OSCP, OSCE, OSEP, CISSP, or equivalent. 持有 OSCP、OSCE、OSEP、CISSP 或同等认证。