Visiting AI Security Resident

Job Type
Term (Fixed Term)

Overview
RAND's Meselson Center, part of the Global and Emerging Risks (GER) division, is seeking mission-driven cybersecurity experts to address critical challenges at the intersection of AI, information security, and national security. As a Visiting AI Security Resident, you'll manage and lead projects that directly impact AI and cybersecurity policy at the highest levels of government and industry, contributing to the security and integrity of powerful AI systems.

Your work will address key questions related to securing AI systems, understanding their cyber capabilities, and examining their policy implications. You will be responsible for leading complex projects that span technical research, policy analysis, and infrastructure development. For example, you might lead projects to develop AI-specific threat models, build software tools for AI cyber capability evaluations, or identify critical areas for new security R&D. Your work will inform analysis delivered to senior government and industry leaders.

You will communicate the results of your work to both technical and non-technical audiences through quick-turnaround policy briefs and detailed written research products. A recent example of one of our research products is the Securing AI Model Weights report, which explored protecting frontier AI models from theft and misuse.

This position is structured as a focused two-year appointment to accelerate research and provide rigorous analysis that informs evidence-based policymaking in this rapidly evolving field. Every day of your tenure will count toward achieving ambitious projects in AI security. The appointment may be renewed for an additional year, with options for longer-term employment at RAND thereafter.

RAND's reputation for excellence is built on our commitment to high-quality, rigorous analysis and objectivity. As a Visiting AI Security Resident, you'll maintain that excellence while engaging with some of the most pressing challenges of our time.

Qualifications
All research positions at RAND require excellent analytic skills; the ability to communicate clearly and effectively, both orally and in writing; the ability to work effectively as a member of a multi-disciplinary team; and a strong commitment to RAND's core values of quality and objectivity.

Required

• Technical experience in security engineering, software engineering, firmware engineering, hardware engineering, or related fields
• Technical management experience, including leading cross-functional teams, managing project budgets, and mentoring and developing team members
• Demonstrated ability to successfully lead complex projects to completion
• Proficiency in Python, Java, C/C++, or other popular programming languages
• Ability to develop rigorous and comprehensive threat models and identify potential system vulnerabilities
• Excellent communication skills, both written and verbal, tailored to technical and non-technical audiences
• Ability to reason about policy options given different technical considerations
• Ability to work effectively in a collaborative, multidisciplinary environment
• Fluency with MS Office suite

Preferred

• Graduate of the Computer Network Operations Development Program (CNODP), Remote Interactive Operator Training (RIOT), Future Operator Readiness Growth and Enrichment (FORGE), or equivalent experience
• Experience with red team operations or offensive cyber capabilities development
• Understanding of advanced persistent threat (APT) tactics, techniques, and procedures (TTPs) and experience with defending against them
• Ability to think creatively about offensive and/or defensive techniques and strategies, beyond compliance with existing regulations
• Familiarity with U.S. cybersecurity agencies, authorities, and policy development processes
• Experience working in or with government on cybersecurity policy
• Experience with advising non-technical stakeholders on security topics
• Familiarity with the AI/ML hardware stack (e.g., GPUs, TPUs, data center design)
• Familiarity with the AI/ML software stack (e.g., CUDA, PyTorch, TensorFlow, Ray)
• Experience working on AI research, ML model training, or model deployment
• Experience with securing AI systems

Education Requirements
RAND is hiring multiple Visiting AI Security Residents at associate, specialist, and expert levels of experience. Minimum education requirements at the associate level include:

A PhD in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Information Security, Information Technology, Mathematics, Applied Mathematics, Physics, Applied Physics, Engineering Physics, Artificial Intelligence, Machine Learning, Engineering and Public Policy, Technology and Policy, National Security Policy, Policy Analysis, Political Science, International Relations, or similar is required.

OR

A Master's degree in the fields listed above with at least 3 years of relevant professional experience, is required.

OR

A Bachelor's degree in the fields listed above with at least 5 years of relevant professional experience, is required.

Master's or PhD preferred.

Security Clearance
Ability to obtain and maintain a U.S. government clearance is preferred but not required.

Location
We are hiring for this position in San Francisco, CA, Washington, DC; Santa Monica, CA; Pittsburgh, PA; and Boston, MA. We offer a hybrid work arrangement, combining work from home and on-site options. Fully remote work within the US, along with US visa support, will also be considered.

Writing or Code Sample
Either a writing sample or a code sample is required for this position. This sample can use a recent, previously written paper or technical report (e.g., journal article, master's thesis or paper written for coursework, research project, technical analysis, briefings), or source code showing technical expertise in relevant domains.

Term
This position is a 2-year term appointment with a possibility of renewal for up to 3 years, alongside options for longer term employment.

Salary Range:
$115,400 - $246,600

Visiting Technical Associate = $115,400 - $167,300

Visiting Technical Specialist = $137,000 - $209,000

Visiting Technical Expert = $157,800 - $246,600

RAND considers a variety of factors when formulating an offer, including but not limited to, the specific role and associated responsibilities; a candidate's work experience, education/training, skills, expertise; and internal equity. Successful candidates will be offered employment in a specific title, as determined by the candidate's education and experience. The salary range includes base pay plus RAND's sabbatic pay (which provides additional compensation above base pay when vacation is taken). In addition, RAND provides strong benefits including health insurance coverage, life and disability insurance, savings plan, paid time-off and more.

Equal Opportunity Employer