IT Security Analyst/Engineer - Pittsburgh Supercomputing Center (PSC)

Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 70,000 - 90,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and vision insurance

Generous retirement savings program

Tuition benefits

Fitness center access

Free Pittsburgh Regional Transit bus pass

Job summary

Carnegie Mellon University is looking for an Information Security Analyst/Engineer to join the Pittsburgh Supercomputing Center's security team. The role involves developing and implementing security tools, responding to incidents, and ensuring effective communication about security practices.

The ideal candidate will have a Bachelor's Degree in Computer Science or a related field, a strong grasp of cryptography, and the ability to effectively convey security concepts. Comprehensive benefits, including medical insurance and retirement plans, are offered.

Qualifications

• Bachelor's Degree in a related field.
• Understanding of networking protocols and cloud security.
• Knowledge of cryptography and access control principles.

Responsibilities

• Develop and tune network-based security tools and processes.
• Configure and review security-related logs.
• Communicate with staff about security technologies.

Skills

Networking protocols

Secure coding guidelines

Cloud security

Cryptography

Access control principles

Frameworks and regulations

Networking security protocols

Communication of security concepts

Education

Bachelor's Degree in Computer Science

Information Security

Information Assurance

Related field (e.g., Electrical Engineering)

Job description

Information Security Analyst/Engineer

Work within the Pittsburgh Supercomputing Center (PSC) security team reporting to the Principal Information Security Officer (PISO). Responsibilities include the development, implementation, and tuning of network-based security tools, systems, processes and policies, configuration and review of security logs, response to security incidents, and communication with staff and PSC users about security technologies and processes.

Core Responsibilities

• Work closely with PSC's networking group to develop, implement, and tune network-based security tools and processes.
• Develop, implement, document and tune systems, processes, and policies that improve PSC's security posture.
• Set up, configure, and review events and logs governing security metrics.
• Respond to any information security incidents that transpire.
• Communicate with staff and PSC users regarding potentially complex security-related technologies and processes (e.g., VPN use and best practices, authentication/authorization solutions, firewall changes, EDR, antivirus, filesystem integrity monitoring, public key encryption, SSH, SSL/TLS, vulnerability assessment and remediation).
• Other related duties as assigned.

Qualifications

• Bachelor's Degree in Computer Science, Information Security, Information Assurance, or related field, e.g., Electrical Engineering.
• Understanding of networking protocols, secure coding guidelines and cloud security.
• Understanding of cryptography (symmetric & asymmetric).
• Understanding of access control principles (e.g., DAC, MFA) and methods (password-based, public-key authentication, Kerberos, etc.).
• Understanding of frameworks and regulations including NIST, HIPAA, NSPM-33, dbGaP, FedRAMP and Research Security is preferred.
• Experience with networking security protocols (SSL/TLS, HTTPS, DNSSEC, Response Policy Zones).
• Ability to communicate security concepts effectively in writing.
• A combination of education and relevant experience from which comparable knowledge is demonstrated may be considered.

Benefits

Eligible employees enjoy comprehensive medical, prescription, dental, and vision insurance; a generous retirement savings program with employer contributions; tuition benefits; paid time off; observed holidays; and life and accidental death and disability insurance. Additional perks include a free Pittsburgh Regional Transit bus pass, family concierge services, fitness center access, and more.

Location: Pittsburgh, PA

Job Function: Security

Position Type: Staff - Regular

Full Time/Part time: Full time

Pay Basis: Salary

Equal Opportunity Employment

Carnegie Mellon University is an Equal Opportunity Employer. Disability and Veteran status is respected. Statement of Assurance is available.