AI and Information Security Analyst

Job Type: Term (Fixed Term) RAND's Meselson Center, part of the Global and Emerging Risks (GER) division, is seeking mission-driven cybersecurity experts to address critical challenges at the intersection of AI, information security, and national security. As an AI and Information Security Analyst, you'll directly impact AI and cybersecurity policy at the highest levels of government and industry, contributing to the security and integrity of powerful AI systems. Your work will address key questions related to securing AI systems, understanding their cyber capabilities, and examining their policy implications. Your work will span technical research, policy analysis, and infrastructure development. For example, you might develop AI-specific threat models, build software tools for AI cyber capability evaluations, or identify critical areas for new security R&D. RAND's reputation for excellence is built on our commitment to high-quality, rigorous analysis and objectivity. In this role, you will apply quantitative and qualitative skills to rigorously analyze AI security problems of national and international importance. Working with multidisciplinary teams of policy researchers, engineers, and scientists, you’ll shape recommendations for the White House, multiple regulatory agencies, the intelligence community, other national governments, and industry. You will communicate the results of your work to both technical and non-technical audiences through quick-turnaround policy briefs and detailed written research products. A recent example of one of our research products is the Securing AI Model Weights report, which explored protecting frontier AI models from theft and misuse. This role offers a unique opportunity to drive key policy decisions, ensuring the responsible development and deployment of powerful AI technologies. Qualifications All analyst positions at RAND require excellent analytic skills; the ability to communicate clearly and effectively in English, both orally and in writing; the ability to work effectively as a member of a multi-disciplinary team; and a strong commitment to RAND's core values of quality and objectivity. Successful applicants will be able to present strong evidence of quantitative and/or qualitative research tools, methods, and technical skills to support large and complex projects; accomplishment with leading or managing large and complex project tasks or analytic tasks; contributions to written research projects, technical reports, and briefings; and training and technical supervision to less experienced staff. Required: • 2 years of technical experience in security engineering, software engineering, firmware engineering, hardware engineering, or related fields • Proficiency in Python, Java, C/C , or other popular programming languages • Ability to develop rigorous and comprehensive threat models and identify potential system vulnerabilities • Strong ability to communicate effectively in English, both verbally and in writing • Ability to work effectively as a member of a multi-disciplinary team • Ability to reason about policy options given different technical considerations Preferred: • Graduate of the Computer Network Operations Development Program (CNODP), Remote Interactive Operator Training (RIOT), Future Operator Readiness Growth and Enrichment (FORGE), or equivalent experience • Experience with reverse engineering, red team operations, or offensive cyber capabilities development • Understanding of advanced persistent threat (APT) tactics, techniques, and procedures (TTPs) and experience with defending against them • Ability to think creatively about offensive and/or defensive techniques and strategies, beyond compliance with existing regulations • Familiarity with U.S. cybersecurity agencies, authorities, and policy development processes • Experience working in or with government on cybersecurity policy • Experience with advising non-technical stakeholders on security topics • Familiarity with the AI/ML hardware stack (e.g. GPUs, TPUs, data center design) • Familiarity with the AI/ML software stack (e.g. CUDA, PyTorch, TensorFlow, Ray) • Experience working on AI research, ML model training, or model deployment • Experience with securing AI systems Education Requirements A master’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Information Security, Information Technology, Mathematics, Applied Mathematics, Physics, Applied Physics, Engineering Physics, Artificial Intelligence, Machine Learning, Engineering and Public Policy, Technology and Policy, National Security Policy, Policy Analysis, Political Science, International Relations, or similar is required. Or A bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Cybersecurity, Information Security, Information Technology, Mathematics, Applied Mathematics, Physics, Applied Physics, Engineering Physics, or similar with at least 10 years of relevant professional experience, is required. Relevant professional experience to meet these requirements should demonstrate the applicant’s ability to execute analytically rigorous methods related to information security. Security Clearance Ability to obtain and maintain a U.S. government clearance is preferred but not required. Location We are actively hiring for this position in San Francisco, CA, as well as our RAND offices in Washington, DC; Santa Monica, CA; Pittsburgh, PA; and Boston, MA. We offer a hybrid work arrangement, combining work from home and on-site options. Fully remote work will also be considered. Writing Sample A writing sample is required for this position. This sample can use a recent, previously written paper or technical report (e.g., journal article, master’s thesis or paper written for coursework, research project, technical analysis, briefings). Applicants with work experience in which they have not produced written products (e.g., ML model development), or in which written products have dissemination restrictions, may submit a short, written summary (i.e., less than one page) of recent products they have developed. Term This position is a 2-year term position with the possibility of renewal for an additional year alongside options for longer term employment. RAND's ability to provide visa and relocation support for this role will be considered. Salary Range: $52,000 - $192,100 Analyst I: $52,000 - $71,500 Analyst II: $62,400 - $85,800 Analyst III: $88,000 - $121,000 Analyst IV: $99,200 - $143,900 Analyst V: $125,900 - $192,100 Hiring ranges for Technical Analysts are slightly higher than the ranges shown. RAND considers a variety of factors when formulating an offer, including but not limited to, the specific role and associated responsibilities; a candidate’s work experience, education/training, skills, expertise; and internal equity. Successful candidates will be offered employment in a specific title, as determined by the candidate's education and experience. The salary range includes base pay plus RAND’s sabbatic pay (which provides additional compensation above base pay when vacation is taken). In addition, RAND provides strong benefits including health insurance coverage, life and disability insurance, savings plan, paid time-off and more. Equal Opportunity Employer: race/color/religion/sex/sexual orientation/gender identity/national origin/disability/vet RAND is a research organization that develops solutions to public policy challenges to help make communities throughout the world safer and more secure, healthier and more prosperous. RAND’s research and analysis address issues that impact people everywhere, including security, health, education, sustainability, growth, and development. Headquartered in Santa Monica, California, RAND has approximately 1,775 people from approximately 55 countries working in offices in North America, Europe and Australia, with annual revenues of $356.2 million. RAND is nonprofit, nonpartisan, and committed to the public interest. Our research is sponsored by government agencies, international organizations, and foundations. We rely on philanthropic support to pursue visionary ideas; address critical problems that are under-researched; and devise innovative approaches for solving acute, complex, or provocative policy challenges. RAND values objectivity and integrity in both its research processes and internal interactions. We emphasize a collegial environment that respects the contributions and dignity of all staff. RAND's reputation is built on quality and objectivity. RAND provides an exciting intellectual environment and opportunities for career growth. We hire highly qualified applicants and provide challenging assignments. Diversity is an essential operating principle at RAND. We look for unique backgrounds, original views, and diversity in academic training, work experience, and ideological outlook. We are committed to Equal Opportunity and Affirmative Action. RAND is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need reasonable accommodation for any part of the application process, or in order to perform the essential functions of a position, please contact Human Resources at (310) 393-0411 or at jobs@rand.org and let us know the nature of your request and your contact information.

Salary : $52,000 - $192,100