Associate AI Red Team Engineer

Carnegie Mellon University•Pittsburgh, PA

17h•Onsite

About The Position

The Associate AI Red Team Engineer works on the AI Security team within the CERT Threat Analysis Directorate at the Software Engineering Institute (SEI). The role supports national security objectives by conducting adversary emulation and capability development for mission partners, with a focus on AI-enabled platforms and the models, hardware, software, and networks they use. This work extends beyond traditional enterprise red teaming and combines offensive cyber tradecraft with AI security. The position involves red teaming real-world systems, developing tactics, techniques, and procedures for attacking AI-enabled systems and related software, and creating tools to support operations. Work may involve planning and rehearsing operations, traveling to field sites, and presenting findings. The role also represents CERT’s technical portfolio and operations in communication with mission partners and internal collaborators. Ongoing learning, mentoring, and knowledge-sharing are part of the team’s work.

Requirements

Bachelor’s degree in Computer Science or a relevant technical discipline and three years of relevant work experience; or a master’s degree in Computer Science or a relevant technical discipline and one year of relevant work experience; or a Ph.D. in Computer Science or another relevant technical discipline. Other technical educational backgrounds may be considered with the described experience.
Previous penetration testing, red teaming, or exploit development experience.
Hands-on experience with at least one command-and-control framework, such as Cobalt Strike or Sliver.
Experience programming or scripting in Python, C, and BASH without AI assistance, and willingness to learn PowerShell.
Experience with reverse-engineering tools, such as NSA Ghidra or IDA Pro.
Ability to read code and quickly identify basic vulnerabilities without AI assistance or fuzzing.
Strong familiarity with TCP/IP and all layers of the OSI model.
Experience using Wireshark and explaining how common network protocols work.
Experience assessing the security of both Linux and Windows systems.
At least one relevant certification: OSCP, CPTS, FORGE/RIOT, eJPT, CBBH, BSCP, PNPT, GRTP, or GPEN. Applicants without these certifications may be considered if equivalent experience is clearly demonstrated during technical interviews.
Excellent oral and written communication skills, particularly technical communication with non-experts.
Willingness to travel 25% outside the office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
Ability to obtain and maintain a Department of War security clearance; the role is subject to a background investigation.

Nice To Haves

Experience with mobile operating systems, such as Android, and other operating systems.
CTF experience may be relevant for Assistant and Associate levels.
Equivalent experience demonstrated during technical interviews may be considered in place of the listed certifications.

Responsibilities

Red team real-world AI-enabled systems, including models and the hardware, software, and networks on which they run, in support of national security objectives.
Develop tactics, techniques, and procedures for attacking AI-enabled systems and related software to help prepare defenders for real-world threats.
Write tools in Python, PowerShell, C, and BASH to enable red team operations.
Represent the CERT technical portfolio of work and operations, and communicate with external mission partners and internal collaborators.
Plan and rehearse red team tactics, techniques, and procedures; travel to field sites; and present relevant findings.
Mentor and cross-train others and share knowledge within the broader community.