AI Engineer - Cyber Programs

Job description

Job Description Summary: Overview The AI Engineer - Cyber Programs is The Coca-Cola Company's dedicated adversarial testing specialist for AI systems. This role systematically probes the Company's AI models, AI-enabled applications, and AI infrastructure for vulnerabilities, ensuring that AI deployments across the enterprise are resilient against adversarial manipulation, misuse, and emerging attack techniques. The focus is on AI-specific adversarial testing — not traditional network or application penetration testing — covering risks such as prompt injection, jailbreaking, data poisoning, model exfiltration, training data leakage, and abuse of agentic AI capabilities. This is a senior individual-contributor role that combines deep expertise in AI/ML systems with offensive security tradecraft applied to the AI domain. The role designs and executes AI cyber-program engagements, develops testing methodologies and tooling, and delivers clear, actionable findings that enable the Company to harden its AI systems before and after deployment. The role partners with AI governance, development teams, and external specialists (including consultants and bug bounty programs) to ensure comprehensive adversarial coverage of the Company's AI portfolio. Key Responsibilities AI Adversarial Testing & Red Teaming Plan and execute adversarial testing engagements against the Company's AI models, LLM-based applications, agentic AI systems, and AI infrastructure. Test for AI-specific vulnerabilities including prompt injection, jailbreaking, output manipulation, data poisoning, model inversion, training data extraction, membership inference, and adversarial evasion. Evaluate the security of AI system architectures, including model hosting, API exposure, data pipelines, fine-tuning workflows, and agent tool-use chains. Assess risks introduced by third-party AI components, vendor-embedded AI, and AI-enabled SaaS products. Methodology & Tooling Development Develop and maintain AI red team methodologies, playbooks, and testing frameworks aligned with NIST AI RMF, MITRE ATLAS, OWASP Top 10 for LLMs, and emerging industry standards. Build and maintain custom tooling, scripts, and automation for AI adversarial testing, including prompt fuzzing, model probing, and automated vulnerability scanning of AI systems. Evaluate and integrate open-source and commercial AI security testing tools (such as Garak, PyRIT , or similar) into the testing workflow. Stay current with the latest AI adversarial research, published attacks, and defensive techniques. AI Security Controls Assessment Assess the effectiveness of AI security controls, including input/output filtering, content moderation, guardrails, access controls, logging, and monitoring. Evaluate human oversight mechanisms, model governance processes, and incident response readiness for AI-specific security events. Test the resilience of AI systems under adversarial conditions, including coordinated multi-step attacks and advanced jailbreak chains. Recommend proportionate controls and mitigations based on testing results, risk severity, and the Company's AI risk appetite. External Partnerships & Coordination Coordinate with external consultants, specialized AI security firms, and bug bounty programs for AI-specific adversarial assessments. Engage with the AI security research community, industry working groups, and standards bodies to stay current and contribute the Company's perspective. Partner with AI governance, development teams, and business units to ensure testing priorities align with the Company's AI deployment roadmap. Reporting & Knowledge Building Produce clear, actionable adversarial testing reports with findings, evidence, risk ratings, and remediation guidance for technical and executive audiences. Maintain a knowledge base of AI vulnerabilities, attack patterns, and testing results to inform future assessments and track remediation progress. Brief Cyber Defense leadership and the CISO on AI threat trends, adversarial testing results, and the Company's AI security posture. Qualifications Minimum 8–12 years of progressive cybersecurity experience, with at least 3–5 years focused on AI/ML security, adversarial testing of AI systems, or applied AI research with a security focus. Demonstrated hands-on experience conducting adversarial testing of AI systems, including large language models, machine learning models, agentic AI, or AI-enabled applications. Strong technical understanding of AI/ML systems, including model architectures, training pipelines, inference APIs, fine-tuning, retrieval-augmented generation (RAG), and agentic frameworks. Working knowledge of AI-specific attack techniques, including prompt injection, jailbreaking, data poisoning, model inversion, training data extraction, and adversarial evasion. Familiarity with AI security frameworks and guidance, including NIST AI RMF, MITRE ATLAS, OWASP Top 10 for LLMs, and ISO/IEC 42001. Experience with AI adversarial testing tools such as Garak, PyRIT , or similar, and the ability to develop custom testing tooling. Strong offensive security fundamentals, including experience with penetration testing, red teaming, or vulnerability research (applied to AI contexts). Excellent written and verbal communication skills, with the ability to produce clear adversarial testing reports for technical developers and executive leadership. Programming proficiency in Python and familiarity with ML frameworks ( PyTorch , TensorFlow, or equivalent). Relevant certifications such as OSCP, GIAC (any), CISSP, or AI-specific credentials are a plus. Education Bachelor's degree in Computer Science , Cybersecurity, Data Science, Engineering, or related technical field required . Master's degree or advanced research experience in AI/ML security, adversarial machine learning, or a related discipline highly desirable . The Coca-Cola Company will not offer sponsorship for employment status (including, but not limited to, H1-B visa status and other employment-based nonimmigrant visas) for this position. Accordingly, all applicants must be currently authorized to work in the United States on a full-time basis and must not require The Coca-Cola Company's sponsorship to continue to work legally in the United States. Skills: Agile, Azure Devops, Business Intelligence Software, DevOps, GitHub, Microsoft Azure, Non Relational Databases, Object-Oriented Programming (OOP), Python (Programming Language), Scala (Programming Language), Software Development, Software Engineering, Structured Query Language (SQL), Terraform (Software), Testing Methodology Pay Range: United States of America: 152,000 USD - 178,300 USD Base pay offered may vary depending on geography, job-related knowledge, skills, and experience. A full range of medical, financial, and/or other benefits, dependent on the position, is offered. Annual Incentive Reference Value Percentage: 15 Annual Incentive reference value is a market-based competitive value for your role. It falls in the middle of the range for your role, indicating performance at target. Location(s): United States of America City/Cities: Atlanta Travel Required: 00% - 25% Relocation Provided: No Job Posting End Date: August 14, 2026 Our Purpose and Growth Culture: We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what’s possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors – curious, empowered, inclusive and agile – and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola. We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.