Associate AI Red Team Engineer

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 120,000 - 190,000; Full time

Job summary

Carnegie Mellon University’s Software Engineering Institute (SEI) invites applications for an AI Red Team Engineer on the AI Security team. You will engage in adversary emulation exercises and develop capabilities for national-security missions, going beyond traditional enterprise red teaming.

Your work spans offensive cyber and AI security across Windows and Linux, with hands-on scripting in Python, C, and BASH. Travel up to 25% may be required; a background check and clearance are required.

Qualifications

• Bachelor’s degree or higher in CS or a technical discipline with 3+ years of relevant work experience; or MS with 1+ year; PhD considered.
• Experience in penetration testing, red teaming, or exploit development.
• Hands-on experience with at least one command-and-control framework.
• Proficiency in Python, C, and BASH; willingness to learn PowerShell.
• Experience with reverse engineering tools (Ghidra, IDA Pro).
• Familiarity with TCP/IP and OSI layers; ability to explain network protocols.
• Experience securing Linux and Windows systems; exposure to mobile OS is a plus.
• Certifications such as OSCP, CPTS, FORGE/RIOT, eJPT, CBBH, BSCP, PNPT, GRTP, GPEN or equivalent experience.

Responsibilities

• Red team real-world AI-enabled systems to support national security objectives.
• Develop new tactics and procedures for attacking AI-enabled systems and related software.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent CERT technical portfolio and communicate with mission partners and internal collaborators.

Skills

Penetration testing

Red teaming

Exploit development

Python

PowerShell

C

BASH

Reverse engineering

Cobalt Strike

Sliver

Ghidra

IDa Pro

TCP/IP

Wireshark

Linux

Windows

Education

Bachelor's Degree in Computer Science or relevant technical discipline

MS in Computer Science or relevant technical discipline

PhD in Computer Science or relevant technical discipline

Tools

Cobalt Strike

Sliver

Ghidra

IDA Pro

Job description

Who We Are

SEI conducts research and development in software engineering,systems engineering, cybersecurity, and many other areas ofcomputing, working to introduce private-sector innovations intogovernment. The SEI works closely with defense and governmentorganizations, industry, and academia to continually improvesoftware-intensive systems. Its core purposes are to helporganizations improve software engineering capabilities, advancecybersecurity methods and technologies, and bring the discipline ofsoftware engineering to AI systems.

What We Do

The CERT Threat Analysis (TA) Directorate conducts research anddevelopment activities to identify, analyze, coordinate disclosure,and mitigate threats and vulnerabilities in systems and software.The TA Directorate is currently comprised of three teams:Artificial Intelligence ( AI) Security, Malware and VulnerabilityExploitation, and Platform and Mission Engineering . The AISecurity team works on advancing the state of the art in AIsecurity at a national and global scale. The Malware andVulnerability Exploitation (MVE) team works to improvecyber-tradecraft analysis within strategic target communities tocounter adversarial use of the Internet and related technologies .The v ulnerability side of MVE (home of the CERT CoordinationCenter) works with an expansive network of vendors, partners, andcollaborators to reduce the societal harm of vulnerable softwareand systems . The Platform and Mission Engineering team developsand maintains tools, environments, and operational support for.themalware analysis, reverse engineering, vulnerability analysis, andAI security domains.

Position Summary

As an AI Red Team Engineer on the AI Security team, you will play a central role in adversary emulation exercises and capabilitydevelopment for our mission partners. Due to our unique positionwithin the TA Directorate, the systems we red- team fall outsidethe realm of 'traditional' enterprise red teaming. Our targets arecommonly AI-enabled platforms used within national securitycontexts.

But this isn't a "make the LLM say the bad thing" type of AI redteam. We operate across multiple domains, meaning that our redteamers are expected to be experts in offensive cyber in additionto AI security. If you are experienced with offensive cybertradecraft and have an interest in breaking into AI, this could bea good fit. Most of our red teamers are actively takinggraduate-level technical courses at CMU and/or pursuing technicalcertifications. Perpetual learning is a core part of what wedo.

While our red team exists within a research organization, researchis only a portion of the work performed by our red team. Much ofthe work will involve red teaming real-world systems, sometimes atan aggressive cadence. This can involve planning and rehearsing redteam TTPs, traveling to field sites, and presenting relevantfindings. Like most red teams, we don't get to pick and choose ourtargets. This means that our red team needs to be well-rounded(both as individuals and as a team). Thus, we expect all applicantsto be savvy with both Windows and Linux, solid with TCP/IP, andhave some experience with penetration testing and/or red teaming(CTF experience may be relevant for Assistant and Associatelevels).

What you’ll do:

• Red team real-world AI-enabled systems (both the model and thehardware/software/network that it runs on) in support of nationalsecurity objectives.
• Develop new tactics, techniques, and procedures for attackingAI-enabled systems and related software in order to better preparedefenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable redteam operations.
• Represent the CERT technical portfolio of work and operations;communicate with external mission partners and internalcollaborators in concert with CERT directorates and teams.

Who you are:

• Bachelor's Degree in Computer Science or a relevant technicaldiscipline with three (3) years of relevant work experience; or aMS in Computer Science or a relevant technical discipline with one(1) year of relevant work experience; or a PhD in Computer Scienceor other relevant technical discipline. Other educationalbackgrounds of a technical nature with experience as described maybe considered.
• You have previous penetration testing, red teaming, or exploitdevelopment experience.
• You have previous hands-on experience with at least one commandand control framework (e.g., Cobalt Strike, Sliver).
• You have experience programming/scripting in Python, C, andBASH ( without the assistance of AI) and are willing to learnPowerShell.
• You have experience with reverse engineering tools ( e.g. NSAGhidra, IDA Pro).
• You are able to read code and quickly spot basicvulnerabilities without the assistance of AI or fuzzing.
• You are very familiar with TCP/IP and all layers of the OSImodel. You have experience using Wireshark and can explain howcommon network protocols work.
• You have experience in assessing the security of both Linux andWindows systems. Experience with mobile ( e.g., Android) and otheroperations systems is also appreciated.
• You have at least one of the following relevant certifications:OSCP, CPTS, FORGE/RIOT, eJPT, CBBH, BSCP, PNPT, GRTP, GPEN. Applicants without these certifications will still be considered ifequivalent experience is clearly demonstrated during technicalinterviews.
• You have excellent communication skills (oral and written),particularly regarding technical communications withnon-experts.
• You enjoy mentoring and cross-training others and sharingknowledgewithin the broader community.
• You have a willingness to travel (25%) outside of your officelocation to other SEI offices, sponsor sites, conferences, andoffsite meetings.
• You will be subject to a background investigation, and you musthave the ability to obtain and maintain a Department of Warsecurity clearance.

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full time/Part time

Full time

Pay Basis

Salary More Information:

• Please visit “ Why Carnegie Mellon ” to learn more about becoming part of an institution inspiring innovations that change the world.
• Click here to view a listing of employee benefits
• Carnegie Mellon University is an Equal OpportunityEmployer/Disability/Veteran .
• Statement of Assurance