AI Red Team Engineer - 2025000

This position can be based at the SEI's offices in Pittsburgh, PA or Arlington, VA.

About the role

As an AI Red Team Engineer on the AI Security team, you will play a central role in adversary emulation exercises and capability development for our mission partners. Due to our unique position within the CERT Threat Analysis (TA) Directorate, the systems we red-team fall outside the realm of "traditional" enterprise red teaming. Our targets are commonly AI-enabled platforms used within national security contexts. This role involves red teaming across multiple domains, requiring expertise in offensive cyber in addition to AI security. While research is a portion of the work, much of it involves red teaming real-world systems at an aggressive cadence, including planning and rehearsing TTPs, traveling to field sites, and presenting findings.

About us

SEI conducts research and development in software engineering, systems engineering, cybersecurity, and other computing areas, introducing private-sector innovations into government. The CERT Threat Analysis (TA) Directorate identifies, analyzes, coordinates disclosure, and mitigates threats and vulnerabilities in systems and software. The AI Security team advances AI security at a national and global scale, while the Malware and Vulnerability Exploitation (MVE) team improves cyber-tradecraft analysis and reduces societal harm from vulnerable software. The Platform and Mission Engineering team develops tools and operational support for malware analysis, reverse engineering, vulnerability analysis, and AI security.

Responsibilities

• Red team real-world AI-enabled systems (both the model and the hardware/software/network it runs on) in support of national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software to better prepare defenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent the CERT technical portfolio of work and operations; communicate with external mission partners and internal collaborators.

Requirements

• BS in computer science, software engineering, networking, information systems, or a related technical field with eight (8) years of experience; MS with five (5) years of experience; PhD with two (2) years of experience; or equivalent combination of training and experience.
• Previous penetration testing, red teaming, or exploit development experience.
• Hands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).
• Experience programming/scripting in Python, C, and BASH (without AI assistance) and willingness to learn PowerShell.
• Experience with reverse engineering tools (e.g., NSA Ghidra, IDA Pro).
• Ability to read code and quickly spot basic vulnerabilities without AI or fuzzing assistance.
• Familiarity with TCP/IP and all layers of the OSI model; experience using Wireshark and explaining common network protocols.
• Experience assessing the security of both Linux and Windows systems. Experience with mobile (e.g., Android) and other operating systems is appreciated.
• At least two of the following certifications: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWEE. Applicants without these may still be considered if equivalent experience is demonstrated during technical interviews.
• Willingness to travel (25%) outside your office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
• Excellent communication skills (oral and written), particularly for technical topics with non-experts.
• Enjoy mentoring and cross-training others while sharing knowledge within the broader community.
• Ability to obtain and maintain a Department of War security clearance; subject to a background investigation.