Senior AI Security Researcher

Originally created in response to one of the first computer viruses—the Morris worm—in 1988, CERT has remained a leader in cybersecurity research, improving the robustness of software systems, and responding to sophisticated cybersecurity threats. Ensuring the robustness and security of AI systems is the next big challenge, and we are seeking life-long learners in the fields of cybersecurity, AI/ML, or related areas, who are willing to cross-train to address AI Security.

About the role

As part of the Threat Analysis Directorate, you will join a group of security experts focused on advancing the state of the art in AI security at a national and global scale. Our tasks include vulnerability discovery and assessments for AI systems, evaluation of the effectiveness and robustness of defenses and mitigations for AI systems, reverse engineering AI systems and models, and identifying new areas where security research is needed. You'll collaborate with elite AI and cybersecurity professionals, university faculty, and government representatives to build new methodologies and technologies that will influence national AI security strategy for decades to come.

You will co-author research proposals, execute studies, and present findings and recommendations to Department of War sponsors, decision makers within government and industry, and at academic conferences. The SEI is a non-profit, federally funded research and development center (FFRDC) at Carnegie Mellon University.

Responsibilities

• Develop state-of-the-art approaches for analyzing robustness of AI systems.
• Apply these approaches to understanding vulnerabilities in AI systems and how attackers adapt their tradecraft to exploit those vulnerabilities.
• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, and work to identify and address emerging and complex threats to AI systems.
• Study and influence the AI security and vulnerability disclosure ecosystems.
• Evaluate the effectiveness of tools, techniques, and processes developed by industry and the AI security research community.
• Uncover and shape fundamental assumptions underlying current best practice in AI security.
• Develop thought models, tools, and datasets that can be used to characterize threats to, and vulnerabilities in, AI systems, and publish those results.
• Use these results to aid in the testing, evaluation, and transition of technologies developed by government-funded research programs.
• Identify opportunities to apply AI to improve existing cybersecurity research.

Requirements

• BS in machine learning, cybersecurity, statistics, or related discipline with ten (10) years of experience; OR MS in the same fields with eight (8) years of experience; OR PhD in the same fields with five (5) years of experience.
• Deep interest in AI/ML and cybersecurity with a penchant for intellectual curiosity and a desire to make an impact beyond your organization.
• Practical experience with applying cybersecurity knowledge toward vulnerability research, analysis, disclosure, or mitigation.
• Experience advising on a range of security topics based on research and expert opinion.
• Familiarity with implementing and applying AI/ML techniques to solving practical problems.
• Familiarity with common AI/ML software packages and tools (e.g., NumPy, PyTorch, TensorFlow, ART).
• Knowledge or familiarity with reverse engineering tools (e.g., NSA Ghidra, IDA Pro).
• Experience with Python, C/C++, or low-level programming.
• Experience developing frameworks, methodologies, or assessments to evaluate effectiveness and robustness of technologies.
• Excellent communication skills (oral and written), particularly regarding technical communications with non-experts.
• Enjoy mentoring and cross-training others and sharing knowledge within the broader community.
• Ability to travel to various locations to support the SEI’s overall mission (5%).
• Subject to a background check and required to obtain and maintain a Department of War (DoW) security clearance.

Candidates with strong technical proficiency in either AI/ML or cybersecurity are welcome to apply, provided a demonstrated intellectual agility and commitment to accelerated learning within the role.

Benefits

• 8% monthly contribution to retirement without employee contribution.
• Tuition benefits for you and your dependent children at CMU and other institutions.
• Flexible work arrangements and paid parental and military leave.
• Annual professional development opportunities, including conference attendance, training, certifications, and reimbursement for professional society memberships.
• Relocation assistance.
• Comprehensive medical, prescription, dental, and vision insurance.
• Generous retirement savings program with employer contributions.
• Ample paid time off and observed holidays.
• Life and accidental death and disability insurance.
• Free Pittsburgh Regional Transit bus pass.
• Access to Family Concierge Team for childcare navigation.
• Fitness center access.

For a comprehensive overview, explore the Benefits page.

Location

Pittsburgh, PA

Schedule

Full time