Cyber Evaluations Engineer

About the role

We're hiring Cyber Evaluations Engineers to build and run the evaluations that measure cyber-relevant capabilities and safeguard robustness in our models. You'll design new evals, run per-release robustness testing, and dig into data on jailbreaks and prompt bypasses to understand where our safeguards hold up and where they don't. You'll also design many of the probes that detect cyber abuse in production and help shape the overall detection architecture alongside the policy team. 

Key responsibilities

• Design and run capability, uplift, and safety evaluations to assess cyber-relevant risk in new models

• Execute per-release safeguard-robustness testing ahead of major model launches

• Analyze evaluation results and communicate findings clearly to the team and to stakeholders

• Design, prototype, and tune detection probes for cyber misuse

• Work with the cyber policy team to turn policy lines into a layered, robust abuse-detection architecture, and measure its precision and coverage over time

• Build and maintain internal tooling used to run and score evaluations

• Collaborate with policy and engineering partners to translate eval findings into safeguard improvements

Minimum qualifications

• Experience building or running evaluations, benchmarks, or test suites for software or ML systems, including delivering results on short, fixed timelines

• Hands-on cybersecurity experience (e.g., CTF participation, vulnerability research, exploit development, or security research)

• Proficiency in Python

• Strong ability to communicate evaluation results with multiple cross-functional stakeholders or potential policy stakeholders

Preferred qualifications

• Deep offensive-security or security-research experience, including experience building AI security benchmarks

• Experience analyzing adversarial or abuse data (e.g., jailbreaks, prompt bypasses, intrusion or fraud telemetry)

• Experience working onsite with government partners on testing or evaluation engagements

• Experience with AI/ML evaluation frameworks

• Familiarity with coordinated vulnerability disclosure practices

• Experience testing pre-release or pre-deployment software or models under confidentiality constraints

• Experience authoring detection content (e.g., Sigma, YARA, Suricata, SIEM rules) or building ML-based abuse detection

• Active secret security clearance or higher, or eligibility to obtain one