Security Incident Response & Forensics Engineer

Carnegie-Mellon-University; Pittsburgh (Allegheny County); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Tuition benefits

Paid time off

Retirement plan

Free transit pass

Job summary

Carnegie Mellon University’s Information Security Office is seeking an IT Security Engineer to bolster incident response, forensics, and monitoring across a diverse university environment. You’ll analyze endpoint, network, and application data to determine impact, preserve evidence, and guide recovery with colleagues across admin, development, and research teams.

The role emphasizes curiosity, rigorous investigation, clear communication, and learning unfamiliar systems while applying strong

Qualifications

• Bachelor’s degree or equivalent in a technical field or relevant experience.
• 3+ years in information security, IT, or digital forensics.
• Hands-on experience with Linux, Windows, or macOS environments.
• Ability to analyze logs, gather evidence, and document conclusions.

Responsibilities

• Monitor and investigate security alerts from multiple data sources.
• Triage events to determine security incidents and containment steps.
• Conduct host and network forensics and collect evidence.
• Identify root cause, scope, and impact; preserve timelines and records.
• Collaborate with admins, engineers, and researchers during investigations.
• Communicate findings clearly to technical and non-technical audiences.
• Support on-call rotation and vulnerability management activities.
• Develop tools and scripts to improve investigations and operations.

Skills

Incident response

Digital forensics

Log analysis

Investigation skills

Education

Bachelor’s degree or equivalent

Job description

Carnegie Mellon University’s Information Security Office is seeking an IT Security Engineer to bolster incident response, forensics, and monitoring across a diverse university environment. You’ll analyze endpoint, network, and application data to determine impact, preserve evidence, and guide recovery with colleagues across admin, development, and research teams.

The role emphasizes curiosity, rigorous investigation, clear communication, and learning unfamiliar systems while applying strong