Cyber Ethics and Responsible AI Expert

Job Title: Cyber Ethics and Responsible AI Expert
Location: Remote
Clearance: None required (Secret preferred but not required). Must be a US Citizen
Employment Type: Full Time

Education: Bachelor's degree in Cybersecurity, Computer Science, or a related field
Work Status: Remote
Salary: $100,000-$130,000

Benefits: Competitive salary and bonus structure, comprehensive health insurance, 401(k) with company match, generous PTO and flexible work options.

Application: Apply here or on our Careers Page @ Careers - Metronome, or email your resume to Careers@wearemetronome.com

Overview:
We are seeking a highly skilled and experienced Cybersecurity Ethics & LLM Evaluation Specialist to contribute to a cutting-edge project. The core focus of this role is to test and evaluate a Large Language Model's (LLM) ability to make sound ethical decisions within the context of penetration testing and ethical hacking scenarios. You will be responsible for crafting complex ethical dilemmas encountered in real-world cybersecurity practices to meticulously evaluate a model's capability against industry best practices, legal frameworks, and established ethical guidelines. Your expertise will directly contribute to the responsible development and deployment of AI in cybersecurity.

Key Responsibilities:

• Design and write nuanced, realistic ethical dilemma questions and scenarios specifically tailored to penetration testing and ethical hacking. These scenarios should probe the LLM's understanding of reasoning through complex cyber constraints and ethical quandaries.

• Craft effective prompts and responses based on the developed scenarios to elicit detailed responses from the LLM while adhering to:

• Relevant cybersecurity industry standards (e.g., NIST, ISO 27001).

• Applicable legal and regulatory requirements (e.g., CFAA, DMCA, GDPR, CCPA, and other relevant local/international laws depending on scenario context).

• Established ethical guidelines and codes of conduct for cybersecurity professionals (e.g., from SANS, (ISC), CREST, EC-Council).

Required Skills and Qualifications:

• Deep Cybersecurity Expertise: Minimum 5+ years of professional experience in penetration testing, ethical hacking, red teaming, or a closely related cybersecurity role.

• Ethical & Legal Acumen: Demonstrable, in-depth understanding and practical experience with:
  * Cybersecurity industry standards (e.g., NIST Cybersecurity Framework, OWASP Top 10, PTES).
  * Relevant laws and regulations pertaining to cybercrime, data privacy, and computer misuse.
  * Ethical guidelines and codes of conduct for cybersecurity professionals.

• Scenario Creation: Proven ability to conceptualize and articulate complex technical and ethical scenarios in a clear and understandable manner.

• Excellent Written Communication: Ability to write clear, concise, and well-structured prompts, evaluations, and reports.

• Understanding of Cyber Incidents: Familiarity with a range of historical and contemporary cyber incidents and the ethical dilemmas they presented.

• Familiarity with LLMs: A foundational understanding of what Large Language Models are, how they generate responses, and their general capabilities and limitations. You do not need to be an AI developer, but you should understand how to interact with an LLM.

Preferred Experience:

• Certifications: Possession of relevant industry certifications such as OSCP, OSCE, GPEN, GWAPT, CEH, CISSP, CISM, or similar.

• AI Ethics/Evaluation: Prior experience in AI ethics, responsible AI development, or specifically evaluating AI/LLM systems for safety, bias, or ethical alignment.

• Penetration Testing Tools & Platforms: Hands-on experience with tools like Metasploit, Burp Suite, Nmap, Cobalt Strike to inform realistic scenario creation.

• Cloud Security: Understanding of ethical hacking considerations within cloud environments (AWS, Azure, GCP).

• Compliance Frameworks: Experience working directly with compliance requirements like PCI DSS, HIPAA, SOX.

• Legal or Policy Background: Experience in a role that involved interpreting or applying legal or policy frameworks to cybersecurity activities.

• Technical Writing: Experience in creating technical documentation or training materials.

Certifications (Preferred):

• Certified Ethical Hacker (CEH)

• Offensive Security Certified Professional (OSCP)

• Similar Roles:

• Cybersecurity Policy Advisor

• Cybersecurity Compliance Officer

• Information Security Governance Analyst