Associate AI Security Researcher

Carnegie Mellon University • Pittsburgh, PA

20h

About The Position

The CERT Division of Carnegie Mellon University’s Software Engineering Institute (SEI) is seeking an Associate AI Security Researcher to advance research in AI security as part of the Threat Analysis Directorate. The role focuses on improving the robustness and security of AI systems through vulnerability research, evaluation of defenses and mitigations, reverse engineering, and identification of emerging research needs. The researcher will collaborate with security experts, AI practitioners, software developers, vendors, policymakers, university faculty, and government representatives to develop methodologies and technologies with national and global impact.

The position involves developing and applying approaches to analyze AI system robustness and vulnerabilities, studying how attackers adapt their techniques, and evaluating tools and practices used by industry and the AI security research community. The researcher will develop models, tools, and datasets to characterize threats and vulnerabilities, publish findings, and support testing, evaluation, and transition of technologies developed through government-funded research. The role also includes identifying opportunities to use AI to improve cybersecurity research, co-authoring proposals, conducting studies, and presenting recommendations to government and industry decision-makers, sponsors, and academic conferences.

The position is based in Pittsburgh, Pennsylvania. Occasional travel, approximately 5%, is required. Employment is regular, full-time staff work. The successful applicant will undergo a background check and must obtain and maintain a Department of War security clearance.

Requirements

• Bachelor’s degree in machine learning, cybersecurity, statistics, or a related discipline and three years of experience; or a master’s degree in the same fields and one year of experience.
• Deep interest in AI/ML and cybersecurity, intellectual curiosity, and a desire to make an impact beyond the organization.
• Practical experience applying cybersecurity knowledge to vulnerability research, analysis, disclosure, or mitigation.
• Familiarity with implementing and applying AI/ML techniques to practical problems.
• Familiarity with common AI/ML software packages and tools, such as NumPy, PyTorch, TensorFlow, or ART.
• Knowledge of or familiarity with reverse-engineering tools, such as NSA Ghidra or IDA Pro.
• Experience with Python, C/C++, or low-level programming.
• Experience developing frameworks, methodologies, or assessments to evaluate the effectiveness and robustness of technologies.
• Strong oral and written communication skills, particularly the ability to communicate technical topics to non-experts.
• Ability to travel occasionally, approximately 5%.
• Ability to pass a background check and obtain and maintain a Department of War security clearance.

Responsibilities

• Develop state-of-the-art approaches for analyzing the robustness of AI systems.
• Apply analysis approaches to identify vulnerabilities in AI systems and understand how attackers adapt their tradecraft to exploit them.
• Reverse engineer malicious code in support of high-impact customers.
• Design and develop new analysis methods and tools.
• Identify and address emerging and complex threats to AI systems.
• Participate effectively in the broader security community.
• Study and influence AI security and vulnerability disclosure ecosystems.
• Evaluate the effectiveness of tools, techniques, and processes developed by industry and the AI security research community.
• Examine and shape fundamental assumptions underlying current AI security best practices.
• Develop thought models, tools, and datasets to characterize threats to and vulnerabilities in AI systems, and publish results.
• Use research results to support testing, evaluation, and transition of technologies developed by government-funded research programs.
• Identify opportunities to apply AI to improve existing cybersecurity research.
• Co-author research proposals, execute studies, and present findings and recommendations to sponsors, government and industry decision-makers, and academic conferences.
• Travel occasionally to SEI and CMU community locations, sponsor sites, conferences, and offsite meetings.

Benefits

• 8% monthly retirement contribution without requiring an employee contribution.
• Tuition benefits at CMU and other institutions for employees and their dependent children.
• Flexible work arrangements.
• Paid parental leave.
• Paid military leave.
• Annual professional development opportunities, including conferences and training.
• Reimbursement for certifications and membership in professional societies.
• Relocation assistance.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level