Job Opportunity: Vulnerability Researcher at SEI - Carnegie Mellon University

The Software Engineering Institute (SEI) at Carnegie Mellon University is advancing software engineering principles and practices on a national and global stage. As a federally funded research and development center, SEI partners with defense and government organizations, industry, and academia to enhance software-intensive systems.

About the CERT Division

The CERT Division of SEI is currently seeking a passionate and skilled Vulnerability Researcher for our Vulnerability Analysis Team within the Threat Analysis Directorate. This team is composed of internet security experts dedicated to elevating the state-of-the-art in vulnerability assessment and discovery, coordinated vulnerability disclosure, and software security.

Key Responsibilities

• Develop state-of-the-art approaches for analyzing executable code.
• Understand systemic vulnerabilities in software systems and how attackers exploit them.
• Study and influence software security and vulnerability disclosure ecosystems.
• Evaluate the effectiveness of tools, techniques, and processes from the security research community.
• Develop models, tools, and datasets that characterize software system threats and vulnerabilities.
• Publish findings to aid in the testing and evaluation of government-funded technologies.

Who You Are

We are looking for someone with a deep interest in cybersecurity, an intellectual curiosity, and a desire to make a significant impact. You should have a collaborative spirit, a strong understanding of research methods in computer science, engineering, and security, and knowledge of internet fundamentals including network protocols and governance. Additionally, you enjoy mentoring, training, and sharing your knowledge.

Your Experience

• Vulnerability research, analysis, disclosure, and mitigation.
• Applying systems architecture and security best practices.
• Advising on a range of security topics based on research and expert opinion.
• Organizing and planning complex projects.
• Communicating complex system designs and technical approaches to diverse audiences.
• Applying data-driven research methods to cost-effectiveness and risk analysis.
• Software development in Python and other programming languages.
• Mathematical programming, statistical modeling, or machine learning.
• Handling confidential and sensitive information properly.
• Applying knowledge of cybersecurity to AI/ML domains and open-source software.
• Automating existing security practices

Qualifications

You possess a BS in Computer Science, Information Science, or an Analytical discipline with eight (8) years of experience; OR an MS in the same fields with five (5) years of experience; OR a PhD in the same fields with two (2) years of experience. You should be willing to travel moderately (15%) to support SEI’s mission, including sponsor sites, conferences, and offsite meetings. You will need to pass a background check and maintain an active Department of Defense security clearance. U.S. work authorization is required, and CMU does not sponsor employment visas for this position.

Why Work Here?

• Join a world-class institution making a significant impact on software engineering.
• Work with cutting-edge technologies and solve critical problems for the government and nation.
• Receive an 8% monthly retirement contribution without the need to contribute personally.
• Access tuition benefits for yourself and your dependent children at CMU and other institutions.
• Enjoy a healthy work/life balance with flexible work arrangements and paid leave options.
• Benefit from university resources including childcare and transit solutions.
• Participate in professional development opportunities, including conferences, training, and certifications.
• Relocation assistance available for qualifying candidates.

Location

Pittsburgh, PA

Job Details

Job Function: Software/Applications Development/Engineering
Position Type: Staff – Regular
Full time/Part time: Full time
Pay Basis: Salary

For more details about becoming part of Carnegie Mellon, please visit and view a listing of employee benefits. Carnegie Mellon University is an Equal Opportunity Employer/Dis