IT Security Analyst/Engineer

IT Security Analyst/Engineer - Pittsburgh Supercomputing Center (PSC)

Carnegie Mellon University is a private, global research university...

Core Responsibilities:

• Work closely with PSC's networking group to develop, implement, and tune network-based security tools, processes.
• Develop, implement, document and tune systems, processes and-or policies that improve PSC's security posture.
• Setup, configure, and review events and-or logs governing security metrics.
• Respond to any information security incidents that transpire.
• Communicate with staff and-or PSC users regarding potentially complex security-related technologies and-or processes (e.g., VPN use and best practices, authentication/authorization solutions, firewall changes, EDR, A/V, filesystem integrity monitoring, public key encryption, SSH, SSL/TLS, vulnerability assessment and remediation.)
• Other related duties as assigned.

Qualifications:

• Bachelor's Degree in Computer Science, Information Security, Information Assurance, or related field, e.g., Electrical Engineering.
• Understanding of networking protocols, secure coding guidelines and cloud security.
• Understanding of cryptography (symmetric & asymmetric).
• Understanding of access control principles (e.g., DAC, MFA) and methods (password-based, public-key authentication, Kerberos, etc.)
• Understanding of frameworks and regulations including: NIST, HIPAA, NSPM-33, dbGaP, FedRAMP and Research Security is preferred.
• Experience with networking security protocols (SSL/TLS, HTTPS, DNSSEC, Response Policy Zones).
• Ability to communicate security concepts effectively in writing.
• A combination of education and relevant experience from which comparable knowledge is demonstrated may be considered.