Incident Response & Digital Forensics Engineer

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 90,000 - 130,000; Full time

Job summary

Carnegie Mellon University’s Information Security Office is seeking an IT Security Engineer to investigate and respond to security incidents across a large university environment. This hands-on role focuses on incident response, digital forensics, security monitoring, and technical investigation.

You will use endpoint, network, application, identity, and other data to determine what happened, preserve evidence, contain threats, and help teams recover securely while communicating findings clearly

Qualifications

• Bachelor's degree or equivalent combination of education, training, and experience.
• Three or more years of relevant technical experience in information security or related field.
• Hands-on experience with major operating systems environments.

Responsibilities

• Monitor and investigate security alerts across network, endpoint, and logs.
• Triage security events and determine if they are incidents.
• Conduct technical investigations using evidence from endpoints, networks, and applications.
• Determine root cause, scope, timeline, and impact of incidents.
• Perform or assist with forensic analysis on hosts and networks.
• Identify affected assets and recommend containment and recovery actions.
• Communicate findings clearly to technical and non-technical audiences.
• Maintain investigation records and evidence custody.

Skills

Incident response

Digital forensics

Security monitoring

Technical investigation

Communication

Education

Bachelor's degree or equivalent

Job description

Carnegie Mellon University’s Information Security Office is seeking an IT Security Engineer to investigate and respond to security incidents across a large university environment. This hands-on role focuses on incident response, digital forensics, security monitoring, and technical investigation.

You will use endpoint, network, application, identity, and other data to determine what happened, preserve evidence, contain threats, and help teams recover securely while communicating findings clearly