Chief Information Security Officer

METR; Berkeley, Northern (CA, KY); Hybrid; USD 493,000 - 579,000; Full time

Benefits offered by this job

Catered meals

In-office gym

Shower facilities

Relocation stipend

Unlimited PTO

Parental leave

Transit/parking stipend

Uber budget

Professional development

Mental health support

Wellness

Home/work equipment budget

Job summary

METR is seeking a CISO to own and evolve the nonprofit’s security posture, oversee incident response, red teaming, and pen testing, and advise on security implications of partnerships and access arrangements. You will lead a cross-functional effort to build a trusted, secure environment.

The role requires deep security expertise, strong communication with executives and researchers, and a mission-aligned mindset to protect AI risk assessment efforts while scaling the organization.

Qualifications

• Security leadership with ownership of an org's security posture and IR leadership experience.
• Experience in threat modeling and defending against insiders and well-resourced adversaries.
• Excellent communication to executives and researchers about complex security concepts.
• Mission-aligned with METR’s focus on AI risk and safety.

Responsibilities

• Set organizational security strategy and consolidate ownership across teams.
• Advise leadership, engineering and operations on security implications of partnerships and model access.
• Own incident response, red teaming and pen testing across METR including people and systems.

Skills

Security leadership

Threat modeling

Red teaming

Excellent communication

Mission-aligned

Tools

DataDog

Kubernetes

CrowdStrike Falcon

Okta

Tailscale

Pulumi

PostgreSQL

Job description

About METR

We are a nonprofit research organization that develops scientific methods to assess AI capabilities, risks, and mitigations, with a specific focus on threats related to AI R&D automation and misalignment.

We believe it is robustly good for policymakers and civil society to have a clear understanding of risks from AI systems, and we are extremely excited to build a team of ambitious, excellent people to tackle one of the most important challenges of our time.

About the role

METR’s mission of enabling transparency and coordination about the risks of frontier AI requires a high degree of trust from frontier AI labs, governments, and the public. As misalignment incidents become more extreme and confidential information about models and frontier AI labs becomes more valuable, we expect to be under increasingly intense pressure from external actors and internal agents.

As METR’s CISO, you will own METR’s overall security posture, proactively planning against future threats and ensuring our security strategy grows as the organization does. This includes managing penetration testing, threat modeling, incident investigation and response, and preventing our internal agents from undermining our security posture, covering both technical and administrative security.

We expect this role to be essential as METR scales - our values, brand and mission requirements imply taking security and confidentiality very seriously. We must be justifiably viewed as secure, professional, and reliable, and are willing to impose costly actions on our staff to achieve this.

What this role looks like

• Setting organizational strategy: You will set our security roadmap and our security culture, consolidating ownership of security areas that today are spread across teams and filling gaps that currently have no owner.

• Advising METR leadership, engineering and operations: You will advise on the security implications of new partnerships, evaluation programs, and model access arrangements before commitments are made.

• Owning incident response, red teaming and pen testing. You will lead these efforts across METR, including both computer and people security.

Required Skills

• Deep security background. You’ve been accountable for an org’s security posture or led high-stakes security engagements in the past, including being part of or leading an IR team. Experience in an industry handling highly sensitive data (e.g., defense, healthcare) is especially desirable.

• Threat modeling and red teaming experience. You can reason about defending against both insiders and sophisticated, well-resourced adversaries.

• Excellent communication. You are comfortable explaining complex threat models and policies to executive leadership, and to researchers across a growing organization.

• Mission-aligned. You care deeply about METR’s mission of investigating catastrophic risks for AI.

Nice-to-haves

• Built a security team from scratch (first security hire or founding CISO).

• Led incident response end to end, including decision-making and communication to stakeholders.

• Experience securing AI/ML systems or agent infrastructure.

• Familiarity with the tooling in our environment: DataDog, Kubernetes, CrowdStrike Falcon, Okta, Tailscale, Pulumi, PostgreSQL.

$492,868 - $578,583 a year

METR also has a host of benefits:

• The office: Catered lunch and dinner daily; in-office gym and shower

• Relocation support: Stipend for moving to the Bay Area

• Time-off and leave: Unlimited PTO and 21-week parental leave for new parents

• Commuter benefit: Monthly transit/parking stipend and an annual Uber budget

• Professional development benefit: for training, courses, conferences, and AI safety education

• Mental health benefit: for therapy, medication, and other mental health expenses

• Wellness benefit: for gym memberships and other wellness expenses

• Work equipment benefit: for home office and workstation equipment expenses

Our Culture

METR is a mission-driven organization. We believe our work can meaningfully shape humanity's future for the better, and we want to be the best people in the world doing this work. We have a tight-knit, collaborative research culture rooted in truth-seeking and integrity. We're fiercely committed to producing high-quality, trustworthy science. We're honest and transparent about our results, especially when they may go against the grain. We've earned trust as reliable partners who handle confidential information with care. We maintain a low-ego, drama-free environment focused on what matters.

Hybrid Requirements

Our technical team members are in our office in Berkeley 3-5 days/week. Please let us know in your application if this is a constraint. If you lack US work authorization and would like to work in-person (strongly preferred), we can likely sponsor a cap-exempt H-1B visa for this role.

We encourage you to apply even if your background may not seem like the perfect fit! We would rather review a larger pool of applications than risk missing out on a promising candidate for the position.

We are committed to diversity and equal opportunity in all aspects of our hiring process. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We welcome and encourage all qualified candidates to apply for our open positions.