"Cybersecurity Engineer"

The American Museum of Natural History is one of the world's preeminent scientific and cultural institutions, and has as its mission to discover, interpret and disseminate information about human cultures, the natural world and the universe through a wide-ranging program of scientific research, education and exhibition.

The Information Technology department is seeking a full-time Cybersecurity Engineer to apply information security knowledge across a broad range of disciplines, activities and contexts to provide a secure data environment for the Museum. This position has operational responsibility across several domains, including, but not limited to: data security, digital forensics, incident response and analysis, IT systems and operations, network security, systems and applications security and vulnerability management.

The Engineer works with IT staff, cybersecurity staff and leadership and other Museum users to develop the security operations and infrastructure controls needed to provide a secure environment and in response to emerging threats and incidents facing the Museum.

Job duties include, but are not limited to:

• Maintain and operate the Museum's information security infrastructure, including, but not limited to: network and host-based security platforms, vulnerability scanning systems and tools, intrusion detection/prevention systems (IDS/IPS), file integrity verification and monitoring software, security information and event management (SIEM) platform, application (Layer 7) firewall, network access control (NAC), data loss prevention (DLP), log indexing and correlation platform, anti-virus and anti-spyware console, firewall and network access controls lists and web and email proxy and filtering systems.
• Review and correlate data from various system reports, alerts and logs, as well as industry and partner alerts to identify potential risks and direct threats to the Museum's infrastructure, services and users. Initiate responses to such alerts consistent with establish operational standards and Museum policy and procedures.
• Identify and complete effective response mitigations in response to detected threats.
• Assist with vulnerabilities and risk analyses of existing and planned systems for a diverse clientele including scientific researchers, educational professionals, exhibit designers, administrative support staff and collaborators. Assist with digital forensics examinations, including malware analysis, using a variety of tools. Support incident response (IR) functions in keeping with existing policies, protocols and procedures.
• Continuously maintain an in-depth knowledge of the rapidly changing cybersecurity landscape by synthesizing information about cybersecurity from various sources including Homeland Security, CERT, media vendors and research organizations. Use that knowledge to spot potential risks to the Museum.
• Participate in weekly off-hours (non-office hours) maintenance windows.
• Participate in weekly on-call rotation to respond to and triage cybersecurity alerts.
• Maintain a schedule that includes after-hours deployment/maintenance and 24/7 emergency response to IT infrastructure service disruptions and cybersecurity threats.

The expected salary range for the Cybersecurity Engineer is $70,000/annual - $77,000/annual. The AMNH offers an extensive benefits package designed to meet the needs of our dedicated and diverse community.

Pay will be determined based on several factors. The hiring range for the position at commencement is based on the type of work and the scope of responsibilities. The salary and placement offered is based on a number of individualized factors, including, but not limited to, skills, knowledge, training, education, credentials, areas of specialization and depth and scope of experience.

Required Qualifications:

Preferred Qualifications:

• College degree in information technology, cybersecurity or another related field.
• Training in cybersecurity methods (including, but not limited to incident response, forensics, cybersecurity operations) that provides a basic knowledge of the data security compliance regulations and information security controls needed to mitigate cyber threats and vulnerabilities of applications, databases and infrastructure platforms.
• Three years direct work experience in information security, information security compliance, incident response, digital forensics and/or associated fields.
• Experience in building and maintaining security systems, including firewalls, intrusion prevention systems, SIEM tools, vulnerability analysis systems, file integrity monitoring tools, data loss prevention, network access control, logging and correlation platforms and endpoint protection systems.
• Proficiency in the development of software code, scripts and automations of cybersecurity services.
• Ability to analyze, troubleshoot and investigate security-related information systems anomalies based on security platform reporting, network traffic, log files and host-based and automated security alerts.

To be considered for this position please visit our web site and apply on line at the following link: careers.amnh.org

The American Museum of Natural History is one of the world's preeminent scientific and cultural institutions. Since its founding in 1869, the Museum has advanced its global mission to discover, interpret and disseminate information about human cultures, the natural world and the universe through a wide-ranging program of scientific research, education and exhibition. The Museum is renowned for its exhibitions and scientific collections, which serve as a field guide to the entire planet and present a panorama of the world's cultures.

The American Museum of Natural History is an Equal Opportunity/Affirmative Action Employer. The Museum does not discriminate with respect to employment, or admission or access to Museum facilities, programs or activities on the basis of race, creed, color, religion, age, disability, marital status, partnership status, gender, sex, sexual orientation, gender identity, gender expression, genetic information, pregnancy, alienage or citizenship status, current or former participation in the uniformed services, status as a veteran, or national or ethnic origin, or on account of any other basis prohibited by applicable City, State, or Federal law.