Mission Area Lead

Mission Area Lead, Automation Integration with Vulnerability ResponseWho We AreSEI conducts applied research and development in software engineering, cybersecurity, and AI in support of government sponsors. The SEI works closely with defense and government organizations, industry, and academia to continually improve and secure software-intensive systems. Our core purposes are to help organizations improve software engineering capabilities, advance cybersecurity methods and technologies, and bring the discipline of software engineering to AI systems.What We DoOnce a Computer Emergency Response Team that formed in 1988 in response to the Morris Worm, today the SEI CERT Division leads as a Cybersecurity Engineering and Resilience Team conducting collaborative and innovative evidence-based research to fortify the cyber ecosystem and protect national security and prosperity. The Threat Analysis Directorate builds on CERT’s nearly 40 years of applied research aimed at solving the Nation’s most difficult cybersecurity challenges. Our mission is to advance the state-of-the-art and practice for analyzing, assuring, and countering software systems to enhance National Security. Our team of ~40 professionals work in a highly collaborative environment with specialties including AI security, advanced malware analysis and reverse engineering, and automated vulnerability response. We conduct the applied research necessary to develop and accelerate cyber tradecraft advantages against threats to National Security. Position SummaryAs a Mission Area Lead, you will be responsible for mission alignment, integration, and accountability of the Threat Analysis Directorate focus area of Automation Integration with Vulnerability Response. This focus area will scale vulnerability coordination to counter emerging AI-driven threats by integrating automation/AI across what are currently manual processes, while also building community partnerships. The current challenge is that automated vulnerability discovery in software systems is vastly outpacing human remediation. You will deliver agentic automation that speeds up remediation, built on decades of SEI’s leading research and experience in coordinated vulnerability disclosure (CVD). You will direct and leverage ongoing SEI CVD projects, and conduct applied R&D to automate vulnerability and extend coordination at scale. Moreover, you will engage government, industry, and academic partners to securely develop, adopt, and use automation to speed mitigation in support of Department of War (DoW) and Federal Civilian Executive Branch (FCEB) priorities. Finally, you will partner across SEI technical and support staff, to create and sustain a culture of technical excellence, creativity, cross-enterprise collaboration, innovation within the portfolio, and secure capability transitions. Who you are:Strategic Direction and Alignment: You will help create and maintain a strategic direction to ensure individual projects enable the greater Mission Area, and by extension, the Threat Analysis Directorate mission and vision.Technical Leadership and Accountability: You have experience managing complex technical projects from initiation through delivery. You can organize cross-functional teams and keep execution on track across multiple concurrent efforts. You have experience leading and advocating for personnel. You lead personnel and set expectations, provide cover, remove blockers, and hold developed milestones accountable.Strategic Communicator and Collaborator: You have outstanding written and oral communication skills. You can synthesize complex technical information into clear status updates, risk assessments, and executive briefings for both internal leadership and external mission partners. You are a communicator with strategic partners to posture the Threat Analysis Directorate for the most impactful outcomes for our applied research.Sponsor and Stakeholder Representation: You proactively partner to create and sustain strong working relationships with mission stakeholders, conducting regular check-ins to assess satisfaction, gather feedback, and ensure alignment between delivered work and partner priorities. You translate partner needs into actionable technical requirements for project teams. Quality-Driven: You ensure deliverables meet both mission partner expectations and SEI standards. You conduct regular project reviews, identify quality gaps, develop corrective actions, and verify that SEI standards for safety, security, and compliance are satisfied.Outcome-Focused: You are a driven by a sense of duty to deliver outcomes that advance thestate of cybersecurity.You balance the deliverable transition timeline, effort coverage, and risks. Culture: Help develop a team culture—across multiple locations—that fosters innovation, technical excellence, and leadership in alignment with SEI core values.What You’ll Do:In conjunction with the CERT leadership team, you will…Manage relationships with government partners in the National Capital Region (as needed/applicable).Serve as a primary technical liaison to DoW and FCEB mission partners in any matters involving CVD and/or automation of vulnerability response. Lead and manage project efforts across the mission area to ensure integration and alignment with broader Threat Analysis Directorate goals.Foster a team culture of technical rigor, accountability, and cross-team collaboration.Manage budgets across multiple mission area efforts to maximize return on investments and strategic value. Review internally developed products and ensure all internal quality, safety, and security requirements are met.Assess the impact of CERT's portfolio of projects for mission partners.Communicate with strategic partners regarding ongoing support and make recommendations for future direction.Partner with other FFRDCs and UARCs to better serve our mission partners.Coordinate across SEI and CMU support functions (including security, IT, contracting, and human resources) to ensure the mission area has what it needs to execute.Requirements:BS in computer science, software engineering, networking, information systems, or a related technical field with ten (10) years of experience; MS in computer science or technical/engineering field with eight (8) years of experience; PhD in computer science or technical/engineering field with five (5) years of experience or equivalent combination of training and experience. Other educational backgrounds of a technical nature with experience as described may be considered.You have 3 or more years of vulnerability management experience at the enterprise/research level, with a technical understanding of vulnerabilities from discovery through validation, coordination, disclosure, mitigation, and remediation.You have a willingness to travel (25%) outside of your office location to other SEI offices, sponsor sites, conferences, and offsite meetings. You will be subject to a background investigation, and you must have the ability to obtain and maintain a Department of War security clearance.LocationPittsburgh, PAJob FunctionSoftware/Applications Development/EngineeringPosition TypeStaff – RegularFull time/Part timeFull timePay BasisSalaryMore Information: Please visit “Why Carnegie Mellon” to learn more about becoming part of an institution inspiring innovations that change the world. Click here to view a listing of employee benefitsCarnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran. Statement of AssuranceSummaryLocation: Pittsburgh, PAType: Full time