AI and Information Security Analyst

$52,000 - $192,100/Yr

RAND Corporation - Washington, DC

Full-time - Mid Level

Remote - Washington, DC

1,001-5,000 employees

Professional, Scientific, and Technical Services

About the position

The AI and Information Security Analyst position at RAND's Meselson Center focuses on addressing critical challenges at the intersection of AI, information security, and national security. The role involves developing AI-specific threat models, conducting technical research, and analyzing policy implications to ensure the security and integrity of AI systems. Analysts will work collaboratively with multidisciplinary teams to shape recommendations for government and industry stakeholders, contributing to the responsible development and deployment of powerful AI technologies.

Responsibilities

• Develop AI-specific threat models and recommendations for risk mitigation
• Execute evaluations and red-teaming exercises
• Contribute to the development of research approaches that answer complex questions at the intersection of AI, information security, and policy
• Apply a broad range of analytically rigorous, quantitative and/or qualitative research methods
• Create tooling and software to support the above efforts
• Translate and communicate results to varied audiences ranging from security professionals to public policy makers at all levels through written products and oral presentations.

Requirements

• 2+ years of technical experience in security engineering, software engineering, firmware engineering, hardware engineering, or related fields
• Proficiency in Python, Java, C/C++, or other popular programming languages
• Ability to develop rigorous and comprehensive threat models and identify potential system vulnerabilities
• Strong ability to communicate effectively in English, both verbally and in writing
• Ability to work effectively as a member of a multi-disciplinary team
• Ability to reason about policy options given different technical considerations.

Nice-to-haves

• Graduate of the Computer Network Operations Development Program (CNODP), Remote Interactive Operator Training (RIOT), Future Operator Readiness Growth and Enrichment (FORGE), or equivalent experience
• Experience with reverse engineering, red team operations, or offensive cyber capabilities development
• Understanding of advanced persistent threat (APT) tactics, techniques, and procedures (TTPs) and experience with defending against them
• Ability to think creatively about offensive and/or defensive techniques and strategies, beyond compliance with existing regulations
• Familiarity with U.S. cybersecurity agencies, authorities, and policy development processes
• Experience working in or with government on cybersecurity policy
• Experience with advising non-technical stakeholders on security topics
• Familiarity with the AI/ML hardware stack (e.g. GPUs, TPUs, data center design)
• Familiarity with the AI/ML software stack (e.g. CUDA, PyTorch, TensorFlow, Ray)
• Experience working on AI research, ML model training, or model deployment.

Benefits

• Health insurance coverage
• Life and disability insurance
• Savings plan
• Paid time-off
• Sabbatical pay for additional compensation during vacation.