AI Red Team Engineer

Carnegie Mellon University • Pittsburgh, PA

22h

About The Position

The AI Red Team Engineer joins the SEI CERT Threat Analysis Directorate’s AI Security team to conduct adversary emulation and develop capabilities in support of mission partners. The team red-teams AI-enabled platforms, particularly in national security contexts, and assesses both the AI models and the hardware, software, and networks on which they operate. This work extends beyond traditional enterprise red teaming and requires expertise in offensive cyber as well as AI security.

The position combines research and capability development with operational red teaming of real-world systems, potentially at an aggressive cadence. Work may include planning and rehearsing tactics, techniques, and procedures, traveling to field sites, and presenting findings. The engineer develops tools to support red team operations and represents CERT’s technical portfolio and operations to external mission partners and internal collaborators. Perpetual learning, mentoring, cross-training, and sharing knowledge are important parts of the team’s work.

The role is based in Arlington, Virginia, or Pittsburgh, Pennsylvania, and requires willingness to travel 25% to other SEI offices, sponsor sites, conferences, and offsite meetings. The employee will be subject to a background investigation and must be able to obtain and maintain a Department of War security clearance.

Requirements

• A bachelor’s degree in computer science, software engineering, networking, information systems, or a related technical field and eight years of experience; a master’s degree in computer science or a technical/engineering field and five years of experience; a Ph.D. in computer science or a technical/engineering field and two years of experience; or an equivalent combination of training and experience. Other technical educational backgrounds may be considered.
• Previous penetration testing, red teaming, or exploit development experience.
• Hands-on experience with at least one command-and-control framework, such as Cobalt Strike or Sliver.
• Experience programming or scripting in Python, C, and BASH without AI assistance, and willingness to learn PowerShell.
• Experience with reverse engineering tools such as NSA Ghidra or IDA Pro.
• Ability to read code and quickly identify basic vulnerabilities without AI assistance or fuzzing.
• Strong familiarity with TCP/IP and all layers of the OSI model.
• Experience using Wireshark and ability to explain how common network protocols work.
• Experience assessing the security of both Linux and Windows systems.
• At least two relevant certifications from the listed options: OSCP, CPTS, FORGE/RIOT, GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, or CWEE. Applicants without these certifications may be considered if they clearly demonstrate equivalent experience during technical interviews.
• Willingness to travel 25% outside the office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
• Excellent oral and written communication skills, particularly when communicating technical information to non-experts.
• Ability to obtain and maintain a Department of War security clearance and pass a background investigation.

Nice To Haves

• Experience with mobile operating systems such as Android and other operating systems.

Responsibilities

• Red-team real-world AI-enabled systems, including the model and the hardware, software, and network on which it runs, in support of national security objectives.
• Develop tactics, techniques, and procedures for attacking AI-enabled systems and related software to help prepare defenders for real-world threats.
• Write tools in Python, PowerShell, C, and BASH to enable red team operations.
• Plan and rehearse red team tactics, techniques, and procedures; travel to field sites; and present relevant findings.
• Represent the CERT technical portfolio of work and operations, communicating with external mission partners and internal collaborators in coordination with CERT directorates and teams.
• Mentor and cross-train others and share knowledge within the broader community.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior