Associate AI Red Team Engineer

Carnegie Mellon University•Pittsburgh, PA

9h•Onsite

About The Position

As an AI Red Team Engineer on the SEI CERT Threat Analysis Directorate’s AI Security team, you will conduct adversary emulation exercises and develop capabilities for mission partners. The work focuses on AI-enabled platforms used in national security contexts, testing both AI models and the hardware, software, and networks on which they run. This is cross-domain red teaming that combines AI security with offensive cyber tradecraft, and includes hands-on work against real-world systems, sometimes at an aggressive cadence. Activities may include planning and rehearsing tactics, techniques, and procedures (TTPs), traveling to field sites, and presenting findings. Research is part of the work, alongside operational red teaming. You will develop tactics, techniques, procedures, and tools to attack AI-enabled systems and related software, helping defenders prepare for real-world threats. You will also represent CERT’s technical portfolio and operations and communicate with external mission partners and internal collaborators. The role calls for a well-rounded practitioner comfortable with Windows and Linux, TCP/IP, penetration testing or red teaming, and ongoing technical learning.

Requirements

Bachelor’s degree in Computer Science or a relevant technical discipline plus three years of relevant work experience; or a master’s degree in Computer Science or a relevant technical discipline plus one year of relevant work experience; or a Ph.D. in Computer Science or another relevant technical discipline. Other technical educational backgrounds may be considered with relevant experience.
Previous penetration testing, red teaming, or exploit development experience.
Hands-on experience with at least one command-and-control framework, such as Cobalt Strike or Sliver.
Experience programming or scripting in Python, C, and BASH without AI assistance, and willingness to learn PowerShell.
Experience with reverse engineering tools, such as NSA Ghidra or IDA Pro.
Ability to read code and quickly identify basic vulnerabilities without AI assistance or fuzzing.
Strong familiarity with TCP/IP and all layers of the OSI model.
Experience using Wireshark and explaining how common network protocols work.
Experience assessing the security of Linux and Windows systems.
At least one relevant certification: OSCP, CPTS, FORGE/RIOT, eJPT, CBBH, BSCP, PNPT, GRTP, or GPEN. Applicants without these certifications may be considered if equivalent experience is clearly demonstrated during technical interviews.
Excellent oral and written communication skills, particularly when communicating technical information to non-experts.
Willingness to mentor and cross-train others and share knowledge within the broader community.
Willingness to travel 25% outside the office location to other SEI offices, sponsor sites, conferences, and offsite meetings.
Ability to obtain and maintain a Department of War security clearance and undergo a background investigation.

Nice To Haves

Experience with mobile operating systems, such as Android, and other operating systems.
CTF experience may be relevant for Assistant and Associate levels.

Responsibilities

Red team real-world AI-enabled systems, including models and the hardware, software, and networks they run on, in support of national security objectives.
Develop tactics, techniques, and procedures for attacking AI-enabled systems and related software to better prepare defenders for real-world threats.
Write tools in Python, PowerShell, C, and BASH to enable red team operations.
Represent the CERT technical portfolio of work and operations.
Communicate with external mission partners and internal collaborators in coordination with CERT directorates and teams.
Plan and rehearse red team tactics, techniques, and procedures; travel to field sites; and present relevant findings.