AI Security Researcher

Carnegie Mellon University • Pittsburgh, PA

20h

About The Position

The CERT Division of Carnegie Mellon University's Software Engineering Institute (SEI) is seeking an AI Security Researcher to advance research in AI security. As part of the Threat Analysis Directorate, the researcher will work with cybersecurity and AI professionals, university faculty, and government representatives on research with national and global impact. The work addresses the robustness and security of AI systems through vulnerability discovery and assessment, evaluation of defenses and mitigations, reverse engineering, and identifying emerging research needs.

The researcher will develop and apply methods for analyzing AI-system robustness and vulnerabilities, study how attackers exploit them, and contribute to threat analysis, tools, methodologies, and datasets. The role includes evaluating industry and research-community practices, supporting testing and transition of government-funded technologies, publishing findings, and communicating results to government and industry decision makers, sponsors, and academic audiences. The position also contributes to the broader security community and identifies ways AI can improve cybersecurity research.

The role is based in Pittsburgh, Pennsylvania. Occasional travel (approximately 5%) is required, and the employee must undergo a background check and obtain and maintain a Department of War security clearance.

Requirements

• Bachelor's degree in machine learning, cybersecurity, statistics, or a related discipline and eight years of experience; or a master's degree in the same fields and five years of experience; or a Ph.D. in the same fields and two years of experience.
• Deep interest in AI/ML and cybersecurity, intellectual curiosity, and a desire to make an impact beyond the organization.
• Practical experience applying cybersecurity knowledge to vulnerability research, analysis, disclosure, or mitigation.
• Experience advising on security topics based on research and expert opinion.
• Familiarity with implementing and applying AI/ML techniques to practical problems.
• Familiarity with common AI/ML software packages and tools, such as NumPy, PyTorch, TensorFlow, or ART.
• Knowledge of or familiarity with reverse-engineering tools such as NSA Ghidra or IDA Pro.
• Experience with Python, C/C++, or low-level programming.
• Experience developing frameworks, methodologies, or assessments to evaluate the effectiveness and robustness of technologies.
• Excellent oral and written communication skills, particularly communicating technical topics to non-experts.
• Ability to travel occasionally, approximately 5%.
• Must undergo a background check and obtain and maintain a Department of War security clearance.

Nice To Haves

• Strong technical proficiency in either AI/ML or cybersecurity, with intellectual agility and commitment to accelerated learning in the other area.

Responsibilities

• Develop state-of-the-art approaches for analyzing the robustness of AI systems.
• Apply analysis approaches to understand vulnerabilities in AI systems and how attackers adapt their tradecraft to exploit them.
• Reverse engineer malicious code in support of high-impact customers.
• Design and develop new analysis methods and tools to identify and address emerging and complex threats to AI systems.
• Participate effectively in the broader security community.
• Study and influence AI security and vulnerability disclosure ecosystems.
• Evaluate the effectiveness of tools, techniques, and processes developed by industry and the AI security research community.
• Investigate and shape fundamental assumptions underlying current AI security best practices.
• Develop thought models, tools, and datasets to characterize threats to and vulnerabilities in AI systems, and publish results.
• Use research results to support testing, evaluation, and transition of technologies developed by government-funded research programs.
• Identify opportunities to apply AI to improve existing cybersecurity research.
• Co-author research proposals, conduct studies, and present findings and recommendations to sponsors, government and industry decision makers, and academic conferences.
• Mentor and cross-train others and share knowledge with the broader community.
• Travel occasionally to SEI and CMU locations, sponsor sites, conferences, and offsite meetings.

Benefits

• 8% monthly retirement contribution, with no employee contribution required.
• Tuition benefits at CMU and other institutions for the employee and dependent children.
• Flexible work arrangements.
• Paid parental leave.
• Paid military leave.
• Annual professional development opportunities, including conferences, training, and certifications.
• Reimbursement for membership in professional societies.
• Relocation assistance may be available to qualified candidates.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior