About METR

We are a nonprofit research organization that develops scientific methods to assess AI capabilities, risks, and mitigations, with a specific focus on threats related to AI R&D automation and misalignment.

We believe it is robustly good for policymakers and civil society to have a clear understanding of risks from AI systems, and we are extremely excited to build a team of ambitious, excellent people to tackle one of the most important challenges of our time.

About the role

What this role looks like

• Setting organizational strategy: You will set our security roadmap and our security culture, consolidating ownership of security areas that today are spread across teams and filling gaps that currently have no owner. 
• Advising METR leadership, engineering and operations: You will advise on the security implications of new partnerships, evaluation programs, and model access arrangements before commitments are made. 
• Owning incident response, red teaming and pen testing. You will lead these efforts across METR, including both computer and people security.

Required Skills

• Deep security background. You’ve been accountable for an org’s security posture or led high-stakes security engagements in the past, including being part of or leading an IR team. Experience in an industry handling highly sensitive data (e.g., defense, healthcare) is especially desirable.
• Threat modeling and red teaming experience. You can reason about defending against both insiders and sophisticated, well-resourced adversaries.
• Excellent communication. You are comfortable explaining complex threat models and policies to executive leadership, and to researchers across a growing organization.
• Mission-aligned. You care deeply about METR’s mission of investigating catastrophic risks for AI.

Nice-to-haves

• Built a security team from scratch (first security hire or founding CISO).
• Led incident response end to end, including decision-making and communication to stakeholders.
• Experience securing AI/ML systems or agent infrastructure.
• Familiarity with the tooling in our environment: DataDog, Kubernetes, CrowdStrike Falcon, Okta, Tailscale, Pulumi, PostgreSQL.