AI Control Researcher
Also called AI Control Scientist
An AI Control Researcher designs the safeguards that limit what a model can do if it turns out to be unreliable or hostile. They keep risk bounded when you cannot fully trust the system you are deploying.
What they do
They define what a model is allowed to do and what could go wrong if it tried to cause harm. They design protocols that pair a trusted model, a human reviewer or a simple rule with an untrusted model, so bad actions are caught or blocked. They build sandboxes and monitors, then attack their own setup with adversarial evaluation harnesses to find gaps. They write down threat assumptions plainly, run experiments, read the failures and revise the protocol. They also explain the residual risk to engineers and leadership in terms people can act on.
What a strong hire delivers
Within the first months, a strong hire delivers a written threat model for one real deployment, with assumptions stated openly. They ship a working control protocol around it, plus an adversarial evaluation that other engineers can rerun. They give leadership a clear measure of the unacceptable-action rate under those assumptions, and a short list of what the protocol does not cover.
How you can tell they are good
Ask them to take a deployment and state the threat assumptions before proposing any defence. Good candidates name what the untrusted model might try, what the monitor can miss, and how they would test that. Ask for a past attack on their own design. Be wary of anyone who claims zero risk or cannot say what their evaluation fails to show.
Why it is hard to fill
The title is rare and often hidden inside safety, security or evaluation roles. The work needs three things that seldom sit together: security instincts, comfort with model behaviour, and the discipline to state assumptions formally. Most candidates are strong in one or two. Few have shipped a protocol against a real adversarial test, so judging depth takes careful conversation, not a keyword search.
Where to find them
Look in AI safety evaluation teams, security engineering groups that have started working on model risk, and formal methods researchers who have moved towards AI. Frontier labs, safety research organisations and a few security-minded start-ups employ them. Titles are often Research Engineer, Security Engineer, Red Team Researcher or Safety Researcher, so read the work, not the label.
Indicative pay
Not enough published evidence yet to give a fair range for this role, which is common for work this new. We benchmark it for you as part of a search.
Interview questions for an AI Control Researcher
- Walk us through a control protocol you designed or studied. What was the threat model and what did it assume about the untrusted model?
A strong answer states the assumptions clearly, such as whether the model could collude or hide its intent. It explains why the protocol fit them. Worry if the threat model is vague or the answer is only about general safety principles.
- How would you measure the unacceptable-action rate for a coding agent, and what would you refuse to claim from the result?
Look for a defined unacceptable action, adversarial attempts to cause it, and honest limits on the claim. Strong candidates mention sample limits and attacker strength. Worry if they present one number as proof of safety.
4 more questions, with what a strong answer covers, are in the Role Kit.
Job description you can post
We are building AI systems that act with real autonomy, and we want to limit the harm if a model behaves badly. We are hiring an AI Control Researcher to design protocols, test them against adversaries and tell us honestly where the remaining risk sits.
What you will do
- Define threat models and state assumptions for our deployed AI systems
- Design control protocols that combine trusted models, monitors and human review
- Build sandboxing and monitoring around model actions
- Create adversarial evaluation harnesses and run them regularly
- Measure the unacceptable-action rate under declared assumptions
- Write clear reports on residual risk for engineers and leadership
What you will bring
- Demonstrated work in security engineering, formal methods or AI safety evaluation
- Experience designing or attacking a defence for a real system
- Ability to write and test threat assumptions precisely
- Practical skill evaluating model behaviour with code
- Clear written communication about uncertainty and limits
Nice to have
- Experience with formal verification of software or protocols
- Prior red teaming of AI agents
- Published or shared research on AI control
Free to use and adapt. If it saves you time, a link back to this page is appreciated.
Skills that matter
- AI controlAdvancedLimit harm from potentially untrusted AI behaviour
- Security engineeringAdvancedProtect systems, identities and sensitive assets
- Model evaluationWorkingMeasure capability and failure modes credibly
- Formal verificationWorkingProve stated properties under explicit assumptions
Other roles in aI control, monitoring and containment
Related roles in other families
How we wrote this
Role definitions are our own editorial work, checked against occupational classifications, standards, research and employer pages. Titles vary by company, and this is a description of the work, not a job advert.
- Research agenda, UK AI Security Institute
- International AI Safety Report 2026, International AI Safety Report
- Top 10 for Large Language Model Applications: official project repository, OWASP
← AI control, monitoring and containmentAll new job families
Start a search
Hiring an AI Control Researcher?
Tell us the work. We find the people already doing it, whatever their job title says, and you meet them already interviewed for your role.
Role Kit
AI Control Researcher: the Role Kit
- What the role is and what a strong hire delivers
- Every interview question, with what a strong answer covers
- A ready-to-post job description
- Where to find the people, and the other titles they use
We email you a copy too. You are only added to Insights if you tick the box.
It is downloading now.
A copy is on its way to your inbox. If you are hiring for this, we would be glad to help.
Meet Beth
Tell Beth who you're hiring. She'll show you how we'd approach it.
Beth knows how we work inside out and keeps up with your market as it moves: who's raising, who's hiring, what roles pay. Ask her anything, right here. In a few minutes you'll know how we'd go about your hire, and you'll have a time in the diary to start it.
Hi, I'm Beth. Hiring an AI Control Researcher? Tell me what you need them to do and I'll show you how we'd find the people already doing it.
- Answers day or night
- Knows your market this week
- No fee unless you hire
- Books your call there and then
- Type or talk, your choice