AI Security Red Team Engineer – Offensive AI Testing

Software Engineering Institute | Carnegie Mellon University; Arlington (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Software Engineering Institute (SEI) at Carnegie Mellon University in Arlington, VA, leads AI security red team activities within the CERT Threat Analysis Directorate. You will simulate adversaries on AI-enabled systems, develop offensive capabilities, and produce actionable findings for national security partners.

Expect to work across Windows and Linux, develop Python/C/BASH tools, and collaborate with researchers, engineers, and mission partners.

Qualifications

• BS in computer science or related technical field with eight (8) years of experience.
• MS in computer science or technical/engineering field with five (5) years of experience.
• PhD in computer science or technical/engineering field with two (2) years of experience or equivalent combination of training and experience.
• Other educational backgrounds of a technical nature with experience as described may be considered.
• Experience in penetration testing, red teaming, or exploit development.
• Hands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).
• Experience programming/scripting in Python, C, and BASH (without the assistance of AI) and willingness to learn PowerShell.
• Experience with reverse engineering tools (e.g. NSA Ghidra, IDA Pro).
• Familiarity with TCP/IP and OSI model; able to explain common network protocols; use of Wireshark.
• Experience in assessing security of Linux and Windows systems; mobile OS experience is a plus.
• Two or more of the following certs: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWNE; equivalent experience considered.
• Willingness to travel (25%) outside office locations.
• Excellent communication (oral/written) for technical audiences; mentoring and knowledge sharing.

Responsibilities

• Red team real-world AI-enabled systems (model and hardware/software/network) in support of national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent CERT technical portfolio and communicate with external mission partners and internal collaborators.

Skills

Penetration testing

Red teaming

Exploit development

Python

C

Bash scripting

PowerShell

Reverse engineering

TCP/IP

Wireshark

Linux security

Windows security

OSCP

Willing to travel

Excellent communication

Mentoring

Education

Bachelor's degree in computer science or related technical field

Master's degree in computer science or technical/engineering field

PhD in computer science or technical/engineering field

Tools

Cobalt Strike

Sliver

Job description

Software Engineering Institute (SEI) at Carnegie Mellon University in Arlington, VA, leads AI security red team activities within the CERT Threat Analysis Directorate. You will simulate adversaries on AI-enabled systems, develop offensive capabilities, and produce actionable findings for national security partners.

Expect to work across Windows and Linux, develop Python/C/BASH tools, and collaborate with researchers, engineers, and mission partners.