Chief Information Security Officer
METR · Berkeley
Extracted from the posting
Own METR's overall security posture, including penetration testing, threat modeling, incident response, and controlling internal agents' security impact. Sets security roadmap and culture, and advises leadership and engineering on partnerships and model access. Does not manage a large engineering team; works closely with platform, infrastructure, and operations teams.
About METR
We are a nonprofit research organization that develops scientific methods to assess AI capabilities, risks, and mitigations, with a specific focus on threats related to AI R&D automation and misalignment.
We believe it is robustly good for policymakers and civil society to have a clear understanding of risks from AI systems, and we are extremely excited to build a team of ambitious, excellent people to tackle one of the most important challenges of our time.
About the role
What this role looks like
- Setting organizational strategy: You will set our security roadmap and our security culture, consolidating ownership of security areas that today are spread across teams and filling gaps that currently have no owner.
- Advising METR leadership, engineering and operations: You will advise on the security implications of new partnerships, evaluation programs, and model access arrangements before commitments are made.
- Owning incident response, red teaming and pen testing. You will lead these efforts across METR, including both computer and people security.
Required Skills
- Deep security background. You’ve been accountable for an org’s security posture or led high-stakes security engagements in the past, including being part of or leading an IR team. Experience in an industry handling highly sensitive data (e.g., defense, healthcare) is especially desirable.
- Threat modeling and red teaming experience. You can reason about defending against both insiders and sophisticated, well-resourced adversaries.
- Excellent communication. You are comfortable explaining complex threat models and policies to executive leadership, and to researchers across a growing organization.
- Mission-aligned. You care deeply about METR’s mission of investigating catastrophic risks for AI.
Nice-to-haves
- Built a security team from scratch (first security hire or founding CISO).
- Led incident response end to end, including decision-making and communication to stakeholders.
- Experience securing AI/ML systems or agent infrastructure.
- Familiarity with the tooling in our environment: DataDog, Kubernetes, CrowdStrike Falcon, Okta, Tailscale, Pulumi, PostgreSQL.
Our culture
Hybrid Requirements:
Our technical team members are in our office in Berkeley 3-5 days/week. Please let us know in your application if this is a constraint. If you lack US work authorization and would like to work in-person (strongly preferred), we can likely sponsor a cap-exempt H-1B visa for this role.
We encourage you to apply even if your background may not seem like the perfect fit! We would rather review a larger pool of applications than risk missing out on a promising candidate for the position.
We are committed to diversity and equal opportunity in all aspects of our hiring process. We do not discriminate on the basis of race, religion, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We welcome and encourage all qualified candidates to apply for our open positions.
Compensation: USD 492,868 – 578,583 per year salary
