AI Red Team Engineer: Offensive AI Security

Software Engineering Institute | Carnegie Mellon University; Pittsburgh (Allegheny County); Sur place; USD 130 000 - 190 000; Plein temps

Résumé du poste

The Software Engineering Institute (SEI) at CMU seeks an AI Red Team Engineer on the AI Security team. You will perform adversary emulation on AI-enabled platforms used in national security contexts, focusing on offensive cyber and AI-security integration.

You will develop new tactics, techniques, and procedures, write supporting tools, and collaborate with mission partners and CERT directorates to strengthen defense capabilities.

Qualifications

• BS in computer science, software engineering, networking, information systems, or a related technical field with eight (8) years of experience; MS in computer science or technical/engineering field with five (5) years of experience; PhD in computer science or technical/engineering field with two (2) years of experience or equivalent combination of training and experience.
• You have previous penetration testing, red teaming, or exploit development experience.
• You have previous hands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).
• You have experience programming/scripting in Python, C, and BASH (without the assistance of AI) and are willing to learn PowerShell.
• You have experience with reverse engineering tools (e.g. NSA Ghidra, IDA Pro).
• You are able to read code and quickly spot basic vulnerabilities without the assistance of AI or fuzzing.
• You are very familiar with TCP/IP and all layers of the OSI model. You have experience using Wireshark and can explain how common network protocols work.
• You have experience in assessing the security of both Linux and Windows systems. Experience with mobile (e.g., Android) and other operating systems is also appreciated.
• You have at least two of the following relevant certifications: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWEE. Applicants without these certifications will still be considered if equivalent experience is clearly demonstrated during technical interviews.
• You have a willingness to travel (25%) outside of your office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
• You have excellent communication skills (oral and written), particularly regarding technical communications with non-experts.
• You enjoy mentoring and cross-training others and sharing knowledge within the broader community.
• You will be subject to a background investigation, and you must have the ability to obtain and maintain a Department of War security clearance.

Responsabilités

• Red team real-world AI-enabled systems (both the model and the hardware/software/network that it runs on) in support of national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software in order to better prepare defenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent the CERT technical portfolio of work and operations; communicate with external mission partners and internal collaborators in concert with CERT directorates and teams.

Connaissances

Penetration testing

Red teaming

Exploit development

Python

PowerShell

C

BASH

TCP/IP

Networking

Wireshark

Formation

BS in computer science/related field

MS in computer science/engineering

PhD in computer science/engineering

Outils

Cobalt Strike

Sliver

Ghidra

IDA Pro

Description du poste

The Software Engineering Institute (SEI) at CMU seeks an AI Red Team Engineer on the AI Security team. You will perform adversary emulation on AI-enabled platforms used in national security contexts, focusing on offensive cyber and AI-security integration.

You will develop new tactics, techniques, and procedures, write supporting tools, and collaborate with mission partners and CERT directorates to strengthen defense capabilities.