Vulnerability Analyst

Carnegie Mellon University • Pittsburgh, PA

15h • Onsite

About The Position

The Vulnerability Analyst will conduct applied research to understand systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit them. The role evaluates tools, techniques, and processes developed by industry and the security research community, and develops models, tools, and data sets to characterize threats and software vulnerabilities. The analyst also develops machine learning-based prototypes, products, and tools to address and automate solutions to AI-related security problems, translating research concepts into practical operational capabilities independently and collaboratively.

The role is part of the SEI CERT Division’s Threat Analysis Directorate, a collaborative team conducting evidence-based research to address cybersecurity challenges and advance methods for analyzing, assuring, and countering software systems in support of national security. The position is based in Arlington, Virginia, or Pittsburgh, Pennsylvania, and requires travel of approximately 25% to SEI offices, sponsor sites, conferences, and offsite meetings. The employee will be subject to a background investigation and must be able to obtain and maintain a Department of War security clearance.

Requirements

• Bachelor’s degree in computer science, machine learning, cybersecurity, or a related discipline and eight years of experience; or a master’s degree in the same fields and five years of experience; or a Ph.D. in the same fields and two years of experience.
• Hands-on experience in AI-based research, vulnerability research and analysis, and statistical modeling.
• Understanding of rigorous research methods in computer science, engineering, security, AI, and related fields.
• Knowledge of internet fundamentals, including network protocols, provider operations, and governance.
• Experience developing software in Python and other modern programming languages.
• Experience building AI/ML solutions that work beyond the laboratory and translating prototypes into usable solutions.
• Knowledge of cybersecurity best practices and how internet infrastructure connects with AI systems and security risks.
• Ability to provide sound technical advice and communicate complex technical topics clearly to varied audiences.
• Ability to collaborate diplomatically with internal and external stakeholders, organize complex projects, and handle confidential and sensitive information with care.
• Willingness to travel approximately 25%.
• Subject to a background investigation and must be able to obtain and maintain a Department of War security clearance.

Responsibilities

• Apply state-of-the-art approaches to understand systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit them.
• Evaluate the effectiveness of tools, techniques, and processes developed by industry and the security research community.
• Develop models, tools, and data sets to characterize threats to and vulnerabilities in software systems, and publish results.
• Develop machine learning-based prototypes, products, and tools to solve and automate solutions to AI-related security problems.
• Translate research concepts into practical, operational capabilities, working independently and collaboratively.
• Provide sound advice on security topics and clearly explain complex technical approaches in writing and in person to managers, technical staff, and customers.
• Plan and organize complex projects and handle confidential and sensitive information carefully.
• Travel approximately 25% to other SEI offices, sponsor sites, conferences, and offsite meetings.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior