Senior AI Red Team Engineer — Offensive AI Security

Software Engineering Institute | Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 180,000 - 250,000; Full time

Job summary

The Software Engineering Institute (SEI) at Carnegie Mellon University seeks an AI Red Team Engineer on the AI Security team to conduct adversary emulation exercises against AI-enabled systems used in national security contexts.

Candidates should have extensive experience in offensive cyber, red teaming, and vulnerability assessment, with proficiency in Python, C, BASH, and knowledge of Linux/Windows, TCP/IP, and security tools.

Qualifications

• BS in computer science, software engineering, networking, information systems, or a related technical field.
• MS in computer science or technical/engineering field with eight (8) years of experience.
• PhD in computer science or technical/engineering field with five (5) years of experience or equivalent.
• Other educational backgrounds of a technical nature with experience as described may be considered.

Responsibilities

• Red team real-world AI-enabled systems to support national security objectives.
• Develop new tactics, techniques, and procedures for attacking AI-enabled systems and related software.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Represent the CERT technical portfolio of work and communicate with external mission partners and internal collaborators.

Skills

Penetration testing

Red teaming

Exploit development

TCP/IP

Credentials/communication

Education

BS in CS / SW Eng / Networking / Info Systems

MS in CS or technical/engineering field

PhD in CS or technical/engineering field

Other technical backgrounds with experience

Tools

Cobalt Strike

Sliver

Ghidra

IDA Pro

Wireshark

Job description

The Software Engineering Institute (SEI) at Carnegie Mellon University seeks an AI Red Team Engineer on the AI Security team to conduct adversary emulation exercises against AI-enabled systems used in national security contexts.

Candidates should have extensive experience in offensive cyber, red teaming, and vulnerability assessment, with proficiency in Python, C, BASH, and knowledge of Linux/Windows, TCP/IP, and security tools.