Visiting AI Security Resident

Job Type:

Term (Fixed Term)

Overview

RAND's Meselson Center, part of the Global and Emerging Risks (GER) division, is seeking mission-driven cybersecurity experts to address critical challenges at the intersection of AI, information security, and national security. As a Visiting AI Security Resident, you'll manage and lead projects that directly impact AI and cybersecurity policy at the highest levels of government and industry, contributing to the security and integrity of powerful AI systems.

Your work will address key questions related to securing AI systems, understanding their cyber capabilities, and examining their policy implications. You will be responsible for leading complex projects that span technical research, policy analysis, and infrastructure development. For example, you might lead projects to develop AI-specific threat models, build software tools for AI cyber capability evaluations, or identify critical areas for new security R&D. Your work will inform analysis delivered to senior government and industry leaders.

You will communicate the results of your work to both technical and non-technical audiences through quick-turnaround policy briefs and detailed written research products. A recent example of one of our research products is the Securing AI Model Weights report, which explored protecting frontier AI models from theft and misuse.

This position is structured as a focused two-year appointment to accelerate research and provide rigorous analysis that informs evidence-based policymaking in this rapidly evolving field. Every day of your tenure will count toward achieving ambitious projects in AI security. The appointment may be renewed for an additional year, with options for longer-term employment at RAND thereafter.

RAND's reputation for excellence is built on our commitment to high-quality, rigorous analysis and objectivity. As a Visiting AI Security Resident, you'll maintain that excellence while engaging with some of the most pressing challenges of our time.

Qualifications

All research positions at RAND require excellent analytic skills; the ability to communicate clearly and effectively, both orally and in writing; the ability to work effectively as a member of a multi-disciplinary team; and a strong commitment to RAND's core values of quality and objectivity.

Required:

• Technical experience in security engineering, software engineering, firmware engineering, hardware engineering, or related fields

• Technical management experience, including leading cross-functional teams, managing project budgets, and mentoring and developing team members

• Demonstrated ability to successfully lead complex projects to completion

• Proficiency in Python, Java, C/C++, or other popular programming languages

• Ability to develop rigorous and comprehensive threat models and identify potential system vulnerabilities

• Excellent communication skills, both written and verbal, tailored to technical and non-technical audiences

• Ability to reason about policy options given different technical considerations

• Ability to work effectively in a collaborative, multidisciplinary environment

• Fluency with MS Office suite

Preferred:

• Graduate of the Computer Network Operations Development Program (CNODP), Remote Interactive Operator Training (RIOT), Future Operator Readiness Growth and Enrichment (FORGE), or equivalent experience

• Experience with red team operations or offensive cyber capabilities development

• Understanding of advanced persistent threat (APT) tactics, techniques, and procedures (TTPs) and experience with defending against them

• Ability to think creatively about offensive and/or defensive techniques and strategies, beyond compliance with existing regulations

• Familiarity with U.S. cybersecurity agencies, authorities, and policy development processes

• Experience working in or with government on cybersecurity policy

• Experience with advising non-technical stakeholders on security topics