Associate AI Security Researcher

Job Summary

The CERT Division of the Software Engineering Institute (SEI) is seeking applicants for the AI Security Researcher role. The position involves collaborating to deliver high-quality results in the emerging area of AI security, ensuring the robustness and security of AI systems.

About the Role

Join a team of security experts focused on advancing the state of the art in AI security at a national and global scale. Tasks include vulnerability discovery and assessments for AI systems, evaluating the effectiveness and robustness of defenses and mitigations, reverse engineering AI systems and models, and identifying new areas where security research is needed.

Responsibilities

• Develop state of the art approaches for analyzing robustness of AI systems.
• Apply these approaches to understand vulnerabilities in AI systems and how attackers adapt their tradecraft to exploit those vulnerabilities.
• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools.
• Work to identify and address emerging and complex threats to AI systems.
• Effectively participate in the broader security community.
• Study and influence the AI security and vulnerability disclosure ecosystems.
• Evaluate the effectiveness of tools, techniques and processes developed by industry and the AI security research community.
• Uncover and shape some of the fundamental assumptions underlying current best practice in AI security.
• Develop thought models, tools and data sets that can be used to characterize the threats to, and vulnerabilities in, AI systems, and publish those results.
• Use these results to aid in the testing, evaluation and transition of technologies developed by government-funded research programs.
• Identify opportunities to apply AI to improve existing cybersecurity research.

Requirements

• You have BS in machine learning, cybersecurity, statistics, or related discipline with three (3) years of experience; OR MS in the same fields with one (1) year of experience.
• You have a deep interest in AI/ML and cybersecurity with a penchant for intellectual curiosity and a desire to make an impact beyond your organization.
• You have practical experience with applying cybersecurity knowledge toward vulnerability research, analysis, disclosure, or mitigation.
• You have familiarity with implementing and applying AI/ML techniques to solving practical problems.
• You have familiarity with common AI/ML software packages and tools (e.g., Numpy, Pytorch, Tensorflow, ART).
• You have knowledge or familiarity with reverse engineering tools (e.g., NSA Ghidra, IDA Pro).
• You have experience with Python, C/C++, or low-level programming.
• You have experience developing frameworks, methodologies, or assessments to evaluate effectiveness and robustness of technologies.
• You have superb communication skills (oral and written), particularly regarding technical communications with non-experts.

Qualifications

• You are able to: Travel to various locations to support the SEI’s overall mission. This includes within the SEI and CMU community, sponsor sites, conferences, and offsite meetings on occasion (5%).
• You will be subject to a background check and will need to obtain and maintain a Department of War (DoW) security clearance.

Benefits

• 8% monthly contribution for your retirement, without having to contribute yourself.
• Tuition benefits to CMU and other institutions for you and your dependent children.
• A healthy work/life balance with flexible work arrangements and paid parental and military leave.
• Annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies.
• Location: Pittsburgh, PA
• Position Type: Staff – Regular Full time/Part time Full time
• Pay Basis: Salary