Total 7 Researcher job vacancies in The United States of America

Are you a cybersecurity and/or AI researcher who enjoys a challenge? Are you excited about pioneering new research areas that will impact academia, industry, and national security? If so, we want you for our team, where you’ll collaborate to deliver high-quality results in the emerging area of AI security. 

The CERT Division of the Software Engineering Institute (SEI) is seeking applicants for the AI Security Researcher role. Originally created in response to one of the first computer viruses -- the Morris worm – in 1988, CERT has remained a leader in cybersecurity research, improving the robustness of software systems, and in responding to sophisticated cybersecurity threats.  Ensuring the robustness and security of AI systems is the next big challenge on the horizon, and we are seeking life-long learners in the fields of cybersecurity, AI/ML, or related areas, who are willing to cross-train to address AI Security.  

The Threat Analysis Directorate, is a group of security experts focused on advancing the state of the art in AI security at a national and global scale.  Our tasks include vulnerability discovery and assessments, evaluation of the effectiveness and robustness of AI systems, exploit discovery and reverse engineering, and identifying new areas where security research is needed. We participate in communities of network defenders, software developers and vendors, security researchers, AI practitioners, and policymakers.

You'll get a chance to work with elite AI and cybersecurity professionals, university faculty, and government representatives to build new methodologies and technologies that will influence national AI security strategy for decades to come. You will co-author research proposals, execute studies, and present findings and recommendations to our DoD sponsors, decision makers within government and industry, and at academic conferences. The SEI is a non-profit, federally funded research and development center (FFRDC) at Carnegie Mellon University.   

What you’ll do: 

• Develop state of the art approaches for analyzing robustness of AI systems.  
• Apply these approaches to understanding vulnerabilities in AI systems and how attackers adapt their tradecraft to exploit those vulnerabilities.  
• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats to AI systems, and effectively participate in the broader security community. 
• Study and influence the AI security and vulnerability disclosure ecosystems.  
• Evaluate the effectiveness of tools, techniques and processes developed by industry and the AI security research community.  
• Uncover and shape some of the fundamental assumptions underlying current best practice in AI security.   
• Develop models, tools and data sets that can be used to characterize the threats to, and vulnerabilities in, AI systems, and publish those results. You will also use these results to aid in the testing, evaluation and transition of technologies developed by government-funded research programs.  
• Identify opportunities to apply AI to improve existing cybersecurity research. 

Who you are:  

• You have a deep interest in AI/ML and cybersecurity with a penchant for intellectual curiosity and a desire to make an impact beyond your organization. 
• You have practical experience with applying cybersecurity knowledge toward vulnerability research, analysis, disclosure, or mitigation. 
• You have experience with advising on a range of security topics based on research and expert opinion. 
• You have familiarity with implementing and applying AI/ML techniques to solving practical problems. 
• You have familiarity with common AI/ML software packages and tools (e.g., Numpy, Pytorch, Tensorflow, ART). 
• You have knowledge or familiarity with reverse engineering tools (e.g. NSA Ghidra, IDA Pro) 
• You have experience with Python, C/C++, or low-level programming. 
• You have experience developing frameworks, methodologies, or assessments to evaluate effectiveness and robustness of technologies. 
• You have superb communication skills (oral and written), particularly regarding technical communications with non-experts. 
• You enjoy mentoring and cross-training others and sharing knowledge within the broader community. 
• You have BS in machine learning, cybersecurity, statistics, or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience. 
• Applicants with a solid technical background in AI/ML or cybersecurity, but not both, are encouraged to apply provided a strong desire to rapidly learn on the job. 

You are able to: 

• Travel to various locations to support the SEI’s overall mission. This includes within the SEI and CMU community, sponsor sites, conferences, and offsite meetings on occasion (5%). 
• You will be subject to a background check and will need to obtain and maintain a Department of Defense security clearance. 

Why work here?  

• Join a world-class organization that continues to have a significant impact on software.  
• Work with cutting-edge technologies and dedicated experts to solve tough problems for the government and the nation.  
• Be surrounded by friendly and knowledgeable staff with broad expertise across AI/ML, cybersecurity, software engineering, risk management, and policy creation. 
• Get 8% monthly contribution for your retirement, without having to contribute yourself.  
• Get tuition benefits to CMU and other institutions for you and your dependent children.  
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave.  
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System.  
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies.  
• Qualify for relocation assistance and so much more.     

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

The Cantlon Lab at Carnegie Mellon University and Piantadosi Lab at UC Berkeley are recruiting a joint postdoctoral researcher for a project on the origins of concepts and reasoning. The postdoc position would reside primarily in Pittsburgh, Carnegie Mellon, and will travel to Berkeley for 1-2 months per year with temporary housing near Berkeley covered by research funds.

Our laboratory is a dynamic, interdisciplinary environment – we work on comparative cognition studies across species, age, and culture. Our broad goal is to understand how complex cognition emerges in human children, which cognitive and neural processes are universal across people, and what makes human cognition unique compared to other species.

The postdoctoral researcher will work with our team on analyses and theories such as those in the following publications:

• https://www.nature.com/articles/ncomms13968
• https://www.science.org/doi/10.1126/sciadv.aaz1002
• https://www.pnas.org/doi/10.1073/pnas.2021865119

Qualifications:

• Prior research experience in cognitive science, research experience with non-human animal or child cognition, and with computational approaches such as machine learning, neural nets, hierarchical regression analyses, and Bayesian models of behavioral data using R Stan.
• Excellent writing skills and a good publication record are preferred

Flexibility, excellence, and passion are vital qualities we value.  Inclusion, collaboration and cultural sensitivity are valued competencies at CMU. Therefore, we are in search of a team member who is able to effectively interact with a varied population of internal and external partners at a high level of integrity. We are looking for someone who shares our values and who will support the mission of the university through their work.

Additional Information:

• Salary and benefits are set at the NIH levels for postdoctoral associates, based on experience.
• Postdoctoral researchers have a 2-year contract with the potential for renewal thereafter.

Interested in this exciting opportunity?  Apply today!

Location

Pittsburgh, PA

Job Function

Pre/Post-Doctoral Associates & Fellows

Position Type

Postdoctoral Associate / Fellow (Fixed Term)

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

Are you a cybersecurity and/or AI researcher who enjoys a challenge? Are you excited about pioneering new research areas that will impact academia, industry, and national security? If so, we want you for our team, where you’ll collaborate to deliver high-quality results in the emerging area of AI security. 

The CERT Division of the Software Engineering Institute (SEI) is seeking applicants for the AI Security Researcher role. Originally created in response to one of the first computer viruses -- the Morris worm – in 1988, CERT has remained a leader in cybersecurity research, improving the robustness of software systems, and in responding to sophisticated cybersecurity threats.  Ensuring the robustness and security of AI systems is the next big challenge on the horizon, and we are seeking life-long learners in the fields of cybersecurity, AI/ML, or related areas, who are willing to cross-train to address AI Security.  

The Threat Analysis Directorate, is a group of security experts focused on advancing the state of the art in AI security at a national and global scale.  Our tasks include vulnerability discovery and assessments, evaluation of the effectiveness and robustness of AI systems, exploit discovery and reverse engineering, and identifying new areas where security research is needed. We participate in communities of network defenders, software developers and vendors, security researchers, AI practitioners, and policymakers.

You'll get a chance to work with elite AI and cybersecurity professionals, university faculty, and government representatives to build new methodologies and technologies that will influence national AI security strategy for decades to come. You will co-author research proposals, execute studies, and present findings and recommendations to our DoD sponsors, decision makers within government and industry, and at academic conferences. The SEI is a non-profit, federally funded research and development center (FFRDC) at Carnegie Mellon University.   

What you’ll do: 

• Develop state of the art approaches for analyzing robustness of AI systems.  
• Apply these approaches to understanding vulnerabilities in AI systems and how attackers adapt their tradecraft to exploit those vulnerabilities.  
• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats to AI systems, and effectively participate in the broader security community. 
• Study and influence the AI security and vulnerability disclosure ecosystems.  
• Evaluate the effectiveness of tools, techniques and processes developed by industry and the AI security research community.  
• Uncover and shape some of the fundamental assumptions underlying current best practice in AI security.   
• Develop models, tools and data sets that can be used to characterize the threats to, and vulnerabilities in, AI systems, and publish those results. You will also use these results to aid in the testing, evaluation and transition of technologies developed by government-funded research programs.  
• Identify opportunities to apply AI to improve existing cybersecurity research. 

Who you are:  

• You have a deep interest in AI/ML and cybersecurity with a penchant for intellectual curiosity and a desire to make an impact beyond your organization. 
• You have practical experience with applying cybersecurity knowledge toward vulnerability research, analysis, disclosure, or mitigation. 
• You have experience with advising on a range of security topics based on research and expert opinion. 
• You have familiarity with implementing and applying AI/ML techniques to solving practical problems. 
• You have familiarity with common AI/ML software packages and tools (e.g., Numpy, Pytorch, Tensorflow, ART). 
• You have knowledge or familiarity with reverse engineering tools (e.g. NSA Ghidra, IDA Pro) 
• You have experience with Python, C/C++, or low-level programming. 
• You have experience developing frameworks, methodologies, or assessments to evaluate effectiveness and robustness of technologies. 
• You have superb communication skills (oral and written), particularly regarding technical communications with non-experts. 
• You enjoy mentoring and cross-training others and sharing knowledge within the broader community. 
• You have BS in machine learning, cybersecurity, statistics, or related discipline with ten (10) years of experience; OR MS in the same fields with eight (8) years of experience; OR PhD in the same fields with five (5) years of experience. 
• Applicants with a solid technical background in AI/ML or cybersecurity, but not both, are encouraged to apply provided a strong desire to rapidly learn on the job. 

You are able to: 

• Travel to various locations to support the SEI’s overall mission. This includes within the SEI and CMU community, sponsor sites, conferences, and offsite meetings on occasion (5%). 
• You will be subject to a background check and will need to obtain and maintain a Department of Defense security clearance. 

Why work here?  

• Join a world-class organization that continues to have a significant impact on software.  
• Work with cutting-edge technologies and dedicated experts to solve tough problems for the government and the nation.  
• Be surrounded by friendly and knowledgeable staff with broad expertise across AI/ML, cybersecurity, software engineering, risk management, and policy creation. 
• Get 8% monthly contribution for your retirement, without having to contribute yourself.  
• Get tuition benefits to CMU and other institutions for you and your dependent children.  
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave.  
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System.  
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies.  
• Qualify for relocation assistance and so much more.   

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time. 
 
The CERT Division of the Software Engineering Institute (SEI) is seeking applicants for the Senior Vulnerability Researcher role. The Vulnerability Analysis Team, within the Threat Analysis Directorate, is a group of internet security experts focused on advancing the state of the art in vulnerability assessment and discovery, coordinated vulnerability disclosure, and software security on a national and global scale. We participate in communities of network defenders, software developers and vendors, security researchers, and policy-makers. We publish security advisories, papers, blog posts, data, and tools. The SEI is a federally funded research and development center at Carnegie Mellon University.  
 
What you’ll do 

• Develop state of the art approaches for analyzing executable code. 
• Apply these approaches to understanding systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit those vulnerabilities. 
• Study and influence the software security and vulnerability disclosure ecosystems. 
  Evaluate the effectiveness of tools, techniques and processes developed by industry and the security research community. 
• Uncover some of the fundamental assumptions underlying current best practice in software security.  
• Develop models, tools and data sets that can be used to characterize the threats to, and vulnerabilities in, software systems, and publish those results. You will also use these results to aid in the testing, evaluation and transition of technologies developed by government-funded research programs. 

Who you are 

• You have a deep interest in cybersecurity, intellectual curiosity and a desire to make an impact beyond your organization. 
• You enjoy developing and communicating innovative ideas and thinking creatively to solve tough problems. 
• You relate collaboratively and diplomatically with people inside and outside the organization. 
• You have a strong understanding of research methods in computer science, engineering and security, and related fields as well as of Internet fundamentals including network protocols, provider operations and governance. 
• You enjoy mentoring and training others as well as sharing knowledge.

You have experience 

• Vulnerability research, analysis, disclosure, and mitigation 
• Applying knowledge of technology, systems architecture and security best practice to practical problems in enterprise security. 
• Advising on a range of security topics based on research and expert opinion.  
• Organizing and planning complex projects 
• Communicating complex system designs, technical approaches and road maps to sponsors, project managers and technical staff, and the ability to distill the implications of complex research results and apply those results to government operations. 
• Applying modern data-driven research methods to cost-effectiveness analysis, risk analysis and information security decision making and collaborating on industry and academic community projects.  
• Developing software in Python and other modern programming languages 
• Mathematical programming, statistical modeling, or machine learning 
• Recognizing and properly handling confidential and sensitive information. 
• Applying cybersecurity knowledge to areas such as AI/ML domain and open-source software
• Automating existing security practices  

 
You are able to 

• You have BS in Computer Science, Information Science, or Analytical discipline with ten (10) years of experience; OR MS in the same fields with eight (8) years of experience; OR PhD in the same fields with five (5) years of experience. 
• You have a willingness to travel to various locations to support the SEI’s overall mission. This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%) 
• You will be subject to a background check and obtain and maintain an active Department of Defense security clearance.  Applicants for this position must be currently legally authorized to work for CMU in the United States. CMU will not sponsor or take over sponsorship of an employment visa for this opportunity.

Why work here? 

• Join a world-class organization that has significant impact on software. 
• Work with cutting edge technologies and experts to solve tough problems for the government and the nation. 
• Get 8% monthly contribution for your retirement, without having to contribute yourself. 
• Get tuition benefits to CMU and other institutions for you and your dependent children. 
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave. 
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System. 
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies. 
• Qualify for relocation assistance and so much more.  

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

About the role

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time. 
 
The CERT Division of the Software Engineering Institute (SEI) is seeking an applicant for the role of a Senior Reverse Engineer Researcher for the Threat Analysis directorate. The SEI is a federally funded research and development center at Carnegie Mellon University.  

What you’ll do 

• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community 
• Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges 
• Design, prototype, and transition new analysis methods and tools 
• Identify and document high-impact, emerging, and complex active security threats 
• Participate in the broader security community through collaboration, papers, and presentations 

Who you are  

• You have strong technical writing experience 
• You recognize and deal appropriately with confidential and sensitive information 
• You are able to handle continual shifting priorities
• You enjoy mentoring and training others as well as sharing knowledge 
• You communicate effectively with technical and non-technical audiences 
• You have BS in Computer Science or related discipline with ten (10) years of experience; OR MS in the same fields with eight (8) years of experience; OR PhD in the same fields with five (5) years of experience 
• You have a willingness to travel to various locations to support the SEI’s overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%) 
• You will be subject to a background check and obtain and maintain an active Department of Defense security clearance 

You have experience with or knowledge of 

• Reverse engineering software binaries 
• Using disassemblers and decompilers (e.g. IDA Pro, NSA Ghidra)  
• Using debuggers (e.g. x32dbg, x64dbg, gdb, WinDbg)  
• Using hex editors and binary analysis similar tools 
• Good knowledge of C/C++, low-level programming, and computer architecture      
• Python or Java development 
• Familiarity with common assembly languages (Intel x86, Intel x64, ARM, etc.) 
• Understanding of binary file formats (PE, ELF, Mach-O).  
• Solid understanding of programming languages and operating system concepts 
• Signature development independent of detection technology 
• Developing extensions or scripts for reverse engineering tools 
• Operating system APIs and security models 
• Internet Protocols and network analysis tools (e.g. Wireshark, netcat, and others) 
• Cryptographic algorithms 
• Kernel-level debugging 
• Device driver development 
• Mobile device development and reverse engineering 
• VirtualBox or VMWare admin or development  
• Build hardware / hardware emulation environments suitable for developing/validating UEFI and other firmware exploits 
• General understanding and experience in Machine Learning 

Why work here? 

• Join a world-class organization that has significant impact on software 
• Work with cutting edge technologies and experts to solve tough problems for the government and the nation 
• Get 8% monthly contribution for your retirement, without having to contribute yourself 
• Get tuition benefits to CMU and other institutions for you and your dependent children 
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave 
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System 
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies 
• Qualify for relocation assistance and so much more 

Location

Arlington, VA, Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

About the role

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time. 
 
The CERT Division of the Software Engineering Institute (SEI) is seeking an applicant for the role of a Reverse Engineer Researcher for the Threat Analysis directorate. The SEI is a federally funded research and development center at Carnegie Mellon University.  

 What you’ll do 

• Reverse engineer malicious code in support of high-impact customers, design and develop new analysis methods and tools, work to identify and address emerging and complex threats, and effectively participate in the broader security community 
• Perform in-depth reverse engineering of malicious code, document and transition results in reports, presentations, and technical exchanges 
• Design, prototype, and transition new analysis methods and tools 
• Identify and document high-impact, emerging, and complex active security threats 
• Participate in the broader security community through collaboration, papers, and presentations 

Who you are  

• You have strong technical writing experience 
• You recognize and deal appropriately with confidential and sensitive information 
• You are able to handle continual shifting priorities
• You enjoy mentoring and training others as well as sharing knowledge 
• You communicate effectively with technical and non-technical audiences 
• You have BS in Computer Science or related discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience 
• You have a willingness to travel to various locations to support the SEI’s overall mission This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%) 
• You will be subject to a background check and obtain and maintain an active Department of Defense security clearance 

You have experience with or knowledge of 

• Reverse engineering software binaries 
• Using disassemblers and decompilers (e.g. IDA Pro, NSA Ghidra)  
• Using debuggers (e.g. x32dbg, x64dbg, gdb, WinDbg)  
• Using hex editors and binary analysis similar tools 
• Good knowledge of C/C++, low-level programming, and computer architecture      
• Python or Java development 
• Familiarity with common assembly languages (Intel x86, Intel x64, ARM, etc.) 
• Understanding of binary file formats (PE, ELF, Mach-O).  
• Solid understanding of programming languages and operating system concepts 
• Signature development independent of detection technology 
• Developing extensions or scripts for reverse engineering tools 
• Operating system APIs and security models 
• Internet Protocols and network analysis tools (e.g. Wireshark, netcat, and others) 
• Cryptographic algorithms 
• Kernel-level debugging 
• Device driver development 
• Mobile device development and reverse engineering 
• VirtualBox or VMWare admin or development  
• Build hardware / hardware emulation environments suitable for developing/validating UEFI and other firmware exploits 
• General understanding and experience in Machine Learning 

Why work here? 

• Join a world-class organization that has significant impact on software 
• Work with cutting edge technologies and experts to solve tough problems for the government and the nation 
• Get 8% monthly contribution for your retirement, without having to contribute yourself 
• Get tuition benefits to CMU and other institutions for you and your dependent children 
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave 
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System 
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies 
• Qualify for relocation assistance and so much more 

CMU’s COVID-19 Vaccination Requirements: As a condition of employment, Carnegie Mellon University requires all staff and faculty working in the United States to be fully vaccinated, including a booster when eligible, against COVID-19. Prior to commencement of employment, new hires in the United States must provide proof of vaccination or obtain an approved exemption. (Exemptions may be requested for medical reasons or for religious or strong moral or ethical conviction.) Staff and faculty must comply with all applicable COVID-19 mitigation requirements. Please see Minimum Requirements to Return to Campus for details regarding the university’s current COVID-19 mitigation requirements.

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: 

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time. 
 
The CERT Division of the Software Engineering Institute (SEI) is seeking applicants for the Vulnerability Researcher role. The Vulnerability Analysis Team, within the Threat Analysis Directorate, is a group of internet security experts focused on advancing the state of the art in vulnerability assessment and discovery, coordinated vulnerability disclosure, and software security on a national and global scale. We participate in communities of network defenders, software developers and vendors, security researchers, and policy-makers. We publish security advisories, papers, blog posts, data, and tools. The SEI is a federally funded research and development center at Carnegie Mellon University.  
 
What you’ll do 

• Develop state of the art approaches for analyzing executable code. 
• Apply these approaches to understanding systemic vulnerabilities in software systems and how attackers adapt their tradecraft to exploit those vulnerabilities. 
• Study and influence the software security and vulnerability disclosure ecosystems. 
  Evaluate the effectiveness of tools, techniques and processes developed by industry and the security research community. 
• Uncover some of the fundamental assumptions underlying current best practice in software security.  
• Develop models, tools and data sets that can be used to characterize the threats to, and vulnerabilities in, software systems, and publish those results. You will also use these results to aid in the testing, evaluation and transition of technologies developed by government-funded research programs. 

Who you are 

• You have a deep interest in cybersecurity, intellectual curiosity and a desire to make an impact beyond your organization. 
• You enjoy developing and communicating innovative ideas and thinking creatively to solve tough problems. 
• You relate collaboratively and diplomatically with people inside and outside the organization. 
• You have a strong understanding of research methods in computer science, engineering and security, and related fields as well as of Internet fundamentals including network protocols, provider operations and governance. 
• You enjoy mentoring and training others as well as sharing knowledge.

You have experience 

• Vulnerability research, analysis, disclosure, and mitigation 
• Applying knowledge of technology, systems architecture and security best practice to practical problems in enterprise security. 
• Advising on a range of security topics based on research and expert opinion.  
• Organizing and planning complex projects 
• Communicating complex system designs, technical approaches and road maps to sponsors, project managers and technical staff, and the ability to distill the implications of complex research results and apply those results to government operations. 
• Applying modern data-driven research methods to cost-effectiveness analysis, risk analysis and information security decision making and collaborating on industry and academic community projects.  
• Developing software in Python and other modern programming languages 
• Mathematical programming, statistical modeling, or machine learning 
• Recognizing and properly handling confidential and sensitive information. 
• Applying cybersecurity knowledge to areas such as AI/ML domain and open-source software
• Automating existing security practices  

 
You are able to 

• You have BS in Computer Science, Information Science, or Analytical discipline with eight (8) years of experience; OR MS in the same fields with five (5) years of experience; OR PhD in the same fields with two (2) years of experience. 
• You have a willingness to travel to various locations to support the SEI’s overall mission. This includes sponsor sites, conferences, and offsite meetings on occasion. Moderate Travel (15%) 
• You will be subject to a background check and obtain and maintain an active Department of Defense security clearance. 

Why work here? 

• Join a world-class organization that has significant impact on software. 
• Work with cutting edge technologies and experts to solve tough problems for the government and the nation. 
• Get 8% monthly contribution for your retirement, without having to contribute yourself. 
• Get tuition benefits to CMU and other institutions for you and your dependent children. 
• Enjoy a healthy work/life balance with flexible work arrangements and paid parental and military leave. 
• Get access to university resources including mindfulness programs, childcare and back-up care benefits, a monthly transit benefit on WMATA, free transportation on the Pittsburgh Regional Transit System. 
• Enjoy annual professional development opportunities; attend conferences and training or obtain a certification and get reimbursed for membership in professional societies. 
• Qualify for relocation assistance and so much more.  

CMU’s COVID-19 Vaccination Requirements: As a condition of employment, Carnegie Mellon University requires all staff and faculty working in the United States to be fully vaccinated, including a booster when eligible, against COVID-19. Prior to commencement of employment, new hires in the United States must provide proof of vaccination or obtain an approved exemption. (Exemptions may be requested for medical reasons or for religious or strong moral or ethical conviction.) Staff and faculty must comply with all applicable COVID-19 mitigation requirements. Please see Minimum Requirements to Return to Campus for details regarding the university’s current COVID-19 mitigation requirements.

Location

Pittsburgh, PA

Job Function

Software/Applications Development/Engineering

Position Type

Staff – Regular

Full Time/Part time

Full time

Pay Basis

Salary

More Information: