{"id":119652,"url":"https://alion.io/job/cmu-ai-red-team-engineer","title":"AI Red Team Engineer","company":{"id":46403,"name":"Software Engineering Institute","domain":"sei.cmu.edu","url":"https://alion.io/company/sei-cmu","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":18,"ghost_share":0,"stale_share":0.944,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pittsburgh, United States","Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":109000,"max_usd":211000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1245},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cobalt Strike","optional":false},{"name":"IDA Pro","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Realm","optional":false},{"name":"Red Teaming","optional":false},{"name":"Sliver","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-08-18T00:00:00Z","employer_posted_date":"2026-08-18","last_verified_at":"2026-10-17T05:13:20Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"Who We Are\nSEI conducts research and development in software engineering, systems engineering, cybersecurity, and many other areas of computing, working to introduce private-sector innovations into government.The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Its core purposes are to help organizations improve software engineering capabilities, advance cybersecurity methods and technologies, and bring the discipline of software engineering to AI systems.\nWhat We Do\nThe CERT Threat Analysis (TA) Directorate conducts research and development activities toidentify, analyze, coordinate disclosure, and mitigatethreats andvulnerabilities in systems and software. The TA Directorate is currentlycomprisedofthreeteams: Artificial Intelligence (AI)Security,MalwareandVulnerabilityExploitation, andPlatform and Mission Engineering. The AI Security team workson advancing the state of the art in AI security at a national and global scale.The Malwareand Vulnerability Exploitation (MVE)team works to improve cyber-tradecraft analysis within strategic target communities to counter adversarial use of the Internet and related technologies. Thevulnerabilityside of MVE(home of the CERT Coordination Center) works with an expansive network of vendors, partners, and collaborators to reduce the societal harm of vulnerable software and systems.ThePlatform and Mission Engineering teamdevelops andmaintainstools,environments, and operational support forthemalware analysis, reverse engineering, vulnerability analysis, and AI securitydomains.\nPosition Summary\nAs an AI Red Team Engineer on the AI Security team, you will playa central rolein adversary emulation exercises and capability development for our mission partners. Due to our unique position within the TA Directorate, the systems wered-teamfall outside the realm of 'traditional' enterprise red teaming. Our targets are commonly AI-enabled platforms used within national security contexts.\nBut thisisn'ta \"make the LLM say the bad thing\" type of AI red team. Weoperateacross multiple domains, meaning that our red teamers are expected to be experts in offensive cyber in addition to AI security. If you are experienced with offensive cyber tradecraft and have an interest in breaking into AI, this could be a good fit. Most of our red teamers are actively taking graduate-level technical courses at CMU and/or pursuing technical certifications. Perpetual learning is a core part of what we do.\nWhile our red team exists within a research organization, research is only aportionof the work performed by our red team. Much of the work will involve red teaming real-world systems, sometimes at an aggressive cadence. This can involve planning and rehearsing red team TTPs, traveling to field sites, and presenting relevant findings. Like most red teams, wedon'tget topick and chooseour targets. This means that our red team needs to be well-rounded (both as individuals and as a team). Thus, we expect all applicants to be savvy with both Windows and Linux, solid with TCP/IP, and have some experience with penetration testing and/or red teaming.\nWhatyou’lldo:\nRed team real-world AI-enabled systems(both the model and the hardware/software/network that it runs on) in support of national securityobjectives.\n\nDevelop new tactics, techniques, and procedures for attacking AI-enabled systemsand related softwarein order tobetter prepare defenders for real-world threats.\n\nWrite tools in Python, PowerShell, C, and BASH to enable red team operations.\n\nRepresent the CERT technical portfolio of work and operations; communicate with external mission partners andinternalcollaboratorsin concert with CERT directorates and teams.\n\nWho you are:\nBS in computer science, software engineering, networking, information systems, or a related technical field with eight (8) years of experience; MS in computer science or technical/engineering field with five (5) years of experience; PhD in computer science or technical/engineering field with two (2) years of experience or equivalent combination of training and experience. Other educational backgrounds of a technical nature with experience as described may be considered.\n\nYou havepreviouspenetration testing, red teaming, or exploit development experience.\n\nYou haveprevioushands-on experience with at least one command and control framework (e.g., Cobalt Strike, Sliver).\n\nYou have experience programming/scripting in Python, C, and BASH(without theassistanceof AI)andare willing to learn PowerShell.\n\nYou haveexperiencewith reverse engineering tools (e.g.NSAGhidra, IDA Pro).\n\nYouare able toread code and quickly spot basic vulnerabilities without theassistanceof AI or fuzzing.\n\nYou arevery familiarwith TCP/IP and all layers of the OSI model.You have experienceusing Wireshark and can explainhow common network protocols work.\n\nYou have experience in assessing the security of both Linux and Windows systems. Experience with mobile(e.g., Android)and other operations systems is also appreciated.\n\nYou have at least two of the following relevant certifications:OSCP, CPTS,FORGE/RIOT,GXPN, GAWN, GCPN, CRTO, CRTL, OSEP, OSWE, CCNA, CWEE.Applicants without thesecertifications willstill be consideredif equivalentexperience isclearlydemonstratedduringtechnical interviews.\n\nYou have a willingness to travel (25%) outside of your office location to other SEI offices, sponsor sites, conferences, and offsite meetings.\n\nYou have excellent communication skills (oral and written), particularlyregardingtechnical communications with non-experts.\n\nYou enjoy mentoring and cross-training others and sharing knowledge within the broader community.\n\nYou will be subject to a background investigation, and you must have the ability to obtain andmaintaina Department ofWarsecurity clearance.\n\nLocation\nArlington, VA, Pittsburgh, PAJob Function\nSoftware/Applications Development/EngineeringPosition Type\nStaff - RegularFull time/Part time\nFull timePay Basis\nSalaryMore Information:\nPlease visit “Why Carnegie Mellon ” to learn more about becoming part of an institution inspiring innovations that change the world.\n\nClick here to view a listing of employee benefits\n\nCarnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.\n\nStatement of Assurance","description_format":"text","description_chars":6341,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Cybersecurity","Education","Higher Education"],"lifecycle":[{"event":"open","at":"2026-08-18T00:00:00Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.297,"p_room":0.28,"age_days":60,"expected_fill_days":14,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/cmu-ai-red-team-engineer","json_url":"https://alion.io/job/cmu-ai-red-team-engineer.json","meta":{"generated_at":"2026-10-17T12:18:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16325,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":46403},"rest":"https://alion.io/mcp/rest/get_company?id=46403"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcmu-ai-red-team-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcmu-ai-red-team-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcmu-ai-red-team-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cmu-ai-red-team-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcmu-ai-red-team-engineer"}]}