AI Security Researcher: Adversarial ML & High Assurance

Commonai C.I.C.; Cambourne; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary & pension

Professional development

Networking opportunities

Office near Cambridge train station

Collaborative environment

High impact role

Job summary

CommonAI CIC in Cambridge is seeking an AI Security Researcher with an attacker mindset to challenge how AI systems can be broken, misused or circumvented. You will support the High Assurance programme, focusing on accuracy, explainability and accountability of AI in regulated environments such as financial services.

You will track research, test attacks, threat-model systems, and help develop interpretable models while sharing findings with Members.

Qualifications

• Proven experience in security research, offensive security or adversarial machine learning (e.g. red-teaming, penetration testing, vulnerability research, or attacks on ML models).
• A strong understanding of how modern AI systems work, including how large language models are trained, deployed and served.
• Familiarity with attacks on AI systems (e.g. jailbreaks, prompt injection, data poisoning, backdoors, model extraction).
• Strong Python, and the ability to build your own tools and experiments.
• Excellent written communication: you can turn complex technical findings into clear briefings for technical and non-technical readers.

Responsibilities

• Track key research and developments relevant to the High Assurance programme, including attacks on AI models, defences against them, and the security of the systems that serve them.
• Report on what these developments mean for the programme and our Members, through written briefings and presentations.
• Review the programme's technical decisions and directions from an attacker's point of view, and propose stronger alternatives.
• Threat-model AI systems used in regulated settings, covering model weights, training data, inference serving, and the tools and agents built on them.
• Red-team the systems we build, within an agreed scope, and report findings through a clear disclosure process.
• Help develop interpretability methods for the simpler models produced by our frontier research, and test their limits, for example by trying to hide behaviour the methods should detect.
• Build internal expertise by sharing what you learn with colleagues and helping answer technical questions from our Members.

Skills

Security research

Offensive security

Adversarial ML

Python

Technical communication

Education

PhD in security or ML

Job description

CommonAI CIC in Cambridge is seeking an AI Security Researcher with an attacker mindset to challenge how AI systems can be broken, misused or circumvented. You will support the High Assurance programme, focusing on accuracy, explainability and accountability of AI in regulated environments such as financial services.

You will track research, test attacks, threat-model systems, and help develop interpretable models while sharing findings with Members.