Chief Information Security Officer
About The Position
METR is a nonprofit research organization focused on assessing AI capabilities, risks, and mitigations, particularly concerning AI R&D automation and misalignment. The Chief Information Security Officer (CISO) will be responsible for METR's overall security posture, proactively planning against future threats and ensuring the security strategy scales with the organization. This includes managing penetration testing, threat modeling, incident investigation and response, and preventing internal agents from undermining security, covering both technical and administrative aspects. The role does not involve managing a large engineering team but requires close collaboration with platform, infrastructure, and operations teams. This position is crucial for METR's growth, emphasizing the need for robust security and confidentiality to maintain trust with AI labs, governments, and the public. The organization is willing to implement costly measures to ensure security and professionalism.
Requirements
- Deep security background with accountability for an organization's security posture or leadership in high-stakes security engagements.
- Experience as part of or leading an Incident Response (IR) team.
- Experience in an industry handling highly sensitive data (e.g., defense, healthcare) is desirable.
- Threat modeling and red teaming experience, with the ability to defend against both insiders and sophisticated adversaries.
- Excellent communication skills, including the ability to explain complex threat models and policies to executive leadership and researchers.
- Deep care for METR's mission of investigating catastrophic risks for AI.
- Technical team members are expected to be in the office in Berkeley 3-5 days/week.
- Willingness to apply for a cap-exempt H-1B visa if needed and desired for in-person work.
Nice To Haves
- Experience building a security team from scratch (first security hire or founding CISO).
- Experience leading incident response end-to-end, including decision-making and stakeholder communication.
- Experience securing AI/ML systems or agent infrastructure.
- Familiarity with tools such as DataDog, Kubernetes, CrowdStrike Falcon, Okta, Tailscale, Pulumi, and PostgreSQL.
Responsibilities
- Set the security roadmap and security culture for the organization.
- Consolidate ownership of security areas currently spread across teams and address existing gaps.
- Advise METR leadership, engineering, and operations on the security implications of new partnerships, evaluation programs, and model access arrangements before commitments are made.
- Lead incident response, red teaming, and penetration testing efforts across METR, encompassing both computer and human security.
- Manage penetration testing, threat modeling, and incident investigation and response.
- Prevent internal agents from undermining the organization's security posture.
Benefits
- Catered lunch and dinner daily
- In-office gym and shower
- Relocation stipend for moving to the Bay Area
- Unlimited PTO
- 21-week parental leave for new parents
- Monthly transit/parking stipend
- Annual Uber budget
- Professional development benefit for training, courses, conferences, and AI safety education
- Mental health benefit for therapy, medication, and other mental health expenses
- Wellness benefit for gym memberships and other wellness expenses
- Work equipment benefit for home office and workstation equipment expenses
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
