Senior AI Red Team Engineer

About the Role

As an AI Red Team Engineer on the AI Security team, you will play a central role in adversary emulation exercises and capability development for our mission partners. The role involves red-teaming AI-enabled platforms used within national security contexts, requiring expertise in both offensive cyber operations and AI security. This position operates across multiple domains, emphasizing hands-on red teaming of real-world systems, often at an aggressive cadence. Responsibilities include planning and rehearsing red team tactics, techniques, and procedures (TTPs), traveling to field sites, and presenting findings. Perpetual learning is core to the role, with many team members actively pursuing graduate-level technical courses at CMU and/or technical certifications.

Responsibilities

• Red team real-world AI-enabled systems (both the model and the underlying hardware/software/network) in support of national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software to better prepare defenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent the CERT technical portfolio of work and operations; communicate with external mission partners and internal collaborators.

Requirements

• BS in computer science, software engineering, networking, information systems, or a related technical field with ten (10) years of experience; MS with eight (8) years of experience; PhD with five (8) years of experience; or equivalent combination of training and experience. Other technical educational backgrounds may be considered.
• Previous penetration testing, red teaming, or exploit development experience.
• Hands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).
• Experience programming/scripting in Python, C, and BASH (without AI assistance) and willingness to learn PowerShell.
• Experience with reverse engineering tools (e.g., NSA Ghidra, IDA Pro).
• Ability to read code and quickly spot basic vulnerabilities without AI or fuzzing assistance.
• Familiarity with TCP/IP and all layers of the OSI model, including experience using Wireshark to analyze common network protocols.
• Experience assessing the security of both Linux and Windows systems. Experience with mobile (e.g., Android) and other operating systems is a plus.
• At least two of the following certifications: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWEE. Applicants without these certifications may still be considered if equivalent experience is demonstrated during technical interviews.
• Willingness to travel (25%) outside of your office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
• Excellent communication skills (oral and written), particularly for technical communications with non-experts.
• Enjoy mentoring and cross-training others and sharing knowledge within the broader community.
• Ability to obtain and maintain a Department of War security clearance; subject to a background investigation.

Benefits

• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Tuition benefits for professional development.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to a Family Concierge Team to help navigate childcare needs.
• Fitness center access and additional wellness perks.

Pay

Salary-based compensation.

Schedule

Full-time, regular staff position.

Location

Arlington, VA or Pittsburgh, PA.