AI Red Team Engineer

SEI conducts research and development in software engineering, systems engineering, cybersecurity, and other computing areas, introducing private-sector innovations into government. The SEI collaborates with defense and government organizations, industry, and academia to improve software-intensive systems, advance cybersecurity methods, and bring software engineering discipline to AI systems.

About the Role

The CERT Threat Analysis (TA) Directorate identifies, analyzes, coordinates disclosure, and mitigates threats and vulnerabilities in systems and software. As an AI Red Team Engineer on the AI Security team, you will conduct adversary emulation exercises and capability development for mission partners. This role involves red-teaming AI-enabled platforms used in national security contexts, requiring expertise in both offensive cyber operations and AI security. While research is part of the work, much of it involves red-teaming real-world systems, including planning TTPs, traveling to field sites, and presenting findings. The role demands a well-rounded skill set in Windows, Linux, TCP/IP, and penetration testing/red teaming.

Responsibilities

• Red team real-world AI-enabled systems (both the model and its underlying hardware/software/network) to support national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software to prepare defenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent the CERT technical portfolio and communicate with external mission partners and internal collaborators.

Requirements

• BS in computer science, software engineering, networking, information systems, or a related technical field with eight (8) years of experience; MS with five (5) years of experience; PhD with two (2) years of experience; or equivalent combination of training and experience.
• Previous penetration testing, red teaming, or exploit development experience.
• Hands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).
• Experience programming/scripting in Python, C, and BASH (without AI assistance) and willingness to learn PowerShell.
• Experience with reverse engineering tools (e.g., NSA Ghidra, IDA Pro).
• Ability to read code and quickly spot basic vulnerabilities without AI or fuzzing assistance.
• Familiarity with TCP/IP and all layers of the OSI model, including experience using Wireshark.
• Experience assessing the security of both Linux and Windows systems; mobile (e.g., Android) and other OS experience appreciated.
• At least two of the following certifications: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWEE. Applicants without these may be considered if equivalent experience is demonstrated.
• Willingness to travel (25%) to SEI offices, sponsor sites, conferences, and offsite meetings.
• Excellent communication skills (oral and written), particularly for technical topics with non-experts.
• Enjoyment of mentoring, cross-training, and knowledge-sharing within the broader community.
• Ability to obtain and maintain a Department of War security clearance; subject to a background investigation.

Benefits

• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to a Family Concierge Team for childcare navigation.
• Fitness center access and additional perks.

Pay

Salary-based compensation.

Schedule

Full-time, regular staff position.

Locations: Arlington, VA or Pittsburgh, PA.