Vulnerability Analyst

About the role

The Software Engineering Institute (SEI) conducts applied research and development in software engineering, cybersecurity, and AI in support of government sponsors. The SEI CERT Division, originally formed as a Computer Emergency Response Team in 1988, now leads as a Cybersecurity Engineering and Resilience Team conducting collaborative, evidence-based research to fortify the cyber ecosystem and protect national security. The Threat Analysis Directorate builds on nearly 40 years of applied research to solve the nation’s most difficult cybersecurity challenges, advancing the state-of-the-art in analyzing, assuring, and countering software systems. The team of approximately 40 professionals works in a highly collaborative environment with specialties in AI security, advanced malware analysis and reverse engineering, and vulnerability analysis. This position is based in Arlington, VA or Pittsburgh, PA.

Responsibilities

• Apply state-of-the-art approaches to understanding systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit those vulnerabilities
• Evaluate the effectiveness of tools, techniques, and processes developed by industry and the security research community
• Develop models, tools, and data sets that can be used to characterize the threats to—and vulnerabilities in—software systems, and publish those results
• Develop machine learning-based prototypes, products, and tools to solve and automate solutions to AI-related security problems
• Translate research concepts into practical, operational capabilities, with the ability to work independently and as part of a collaborative team

Qualifications

• Mission-Driven Curiosity: Deeply interested in cybersecurity, AI, and automation, with a desire for impact beyond the organization; picks up new technologies and domains quickly and adapts as the threat landscape changes
• AI and Vulnerability Research Expertise: Hands-on experience in AI-based research, vulnerability research and analysis, and statistical modeling; understands rigorous research methods in computer science, engineering, security, AI, and related fields, as well as internet fundamentals including network protocols, provider operations, and governance
• Applied AI/ML Engineering: Experience developing software in Python and other modern languages; has built AI/ML solutions that work outside the lab and knows what it takes to get from prototype to something people actually use
• Security and Internet Fundamentals: Knows cybersecurity best practices and has a strong grasp of how the internet works, including network protocols, provider operations, and governance; can see where AI systems connect with real-world infrastructure and risk
• Trusted Technical Advisor: Gives sound advice on a range of security topics, grounded in research and expert judgment; explains complex technical approaches clearly, in writing and in person, to managers, technical staff, and customers alike
• Collaborative and Discreet Professional: Works collaboratively and diplomatically with people inside and outside the organization; plans and organizes complex projects, and handles confidential and sensitive information with care

Requirements

• BS in computer science, machine learning, cybersecurity, or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience
• Willingness to travel (25%) outside of office location to other SEI offices, sponsor sites, conferences, and offsite meetings
• Subject to a background investigation; must have the ability to obtain and maintain a Department of War security clearance

Benefits

• Comprehensive medical, prescription, dental, and vision insurance
• Generous retirement savings program with employer contributions
• Tuition benefits
• Ample paid time off and observed holidays
• Life and accidental death and disability insurance
• Free Pittsburgh Regional Transit bus pass
• Access to Family Concierge Team to help navigate childcare needs
• Fitness center access