R
RAND is a nonprofit policy research organization with 1,000+ employees operating across nine policy domains (national security, health, education, infrastructure, and others). The hiring mix is heavily weighted toward security (12 active roles) relative to research (7) and engineering (3), paired with projects centered on AI threat modeling, penetration testing, and SCIF construction — indicating a significant internal shift toward AI-risk assessment and physical/cyber security maturity alongside traditional policy work.
Tech Stack 21 technologies
Core StackPython Java Workday SAP Jira Linux VMware Windows Server Active Directory C/C++ Microsoft Office Excel DISS Windows Red Hat Enterprise Linux DNS DHCP ESX Envoy Group Policy
What RAND Is Building
◆Challenges
- Ensure compliance with regulations
- Prevent theft and fraud
- Maintain secure environment
- Securing ai systems
- Examining policy implications
- Maintaining financial stability
- Accurate and timely cash management
- Managing scif security
- Investigating security violations
- 24x7 availability and reliability
▲Active Projects
- Annual penetration testing coordination
- Construction of scifs
- Develop ai-specific threat models
- Build software tools for ai cyber capability evaluations
- Ai model attack lifecycle evaluation
- Autonomous operations benchmarks
- Ctf challenge frameworks
- Developing security procedures
- Implementing corrective actions after audits
- Coaching security program staff
Hiring Activity
30 roles · 15 in 30d
Department
Seniority
Notable leadership hires: Research Lead, Research Director, Associate Director
Company intelligence
