IT Security Analyst/Engineer - Pittsburgh Supercomputing Center (PSC)

Carnegie Mellon University•Pittsburgh, PA

17h•Onsite

About The Position

The Pittsburgh Supercomputing Center (PSC) is seeking an Information Security Analyst/Engineer. This role is immersed within PSC’s small, yet streamlined security team, reporting to PSC’s Principal Information Security Officer (PISO). As a member of the team, this position will participate in discussions regarding the improvement of PSC’s security posture by leveraging evidence-based standards and threat intelligence sharing. PSC advances science across a wide spectrum of fields, including artificial intelligence / machine learning, medical imaging, weather modeling, cell biology, and genomics.

Requirements

Bachelor's Degree in Computer Science, Information Security, Information Assurance, or related field, e.g., Electrical Engineering.
Understanding of networking protocols, secure coding guidelines and cloud security.
Understanding of cryptography (symmetric & asymmetric).
Understanding of access control principles (e.g., DAC, MFA) and methods (password-based, public-key authentication, Kerberos, etc.)
Experience with networking security protocols (SSL/TLS, HTTPS, DNSSEC, Response Policy Zones).
Ability to communicate security concepts effectively in writing.
A combination of education and relevant experience from which comparable knowledge is demonstrated may be considered.

Nice To Haves

Understanding of frameworks and regulations including: NIST, HIPAA, NSPM-33, dbGaP, FedRAMP and Research Security is preferred.

Responsibilities

Work closely with PSC’s networking group to develop, implement, and tune network-based security tools, processes.
Develop, implement, document and tune systems, processes and-or policies that improve PSC’s security posture.
Setup, configure, and review events and-or logs governing security metrics.
Respond to any information security incidents that transpire.
Communicate with staff and-or PSC users regarding potentially complex security-related technologies and-or processes (e.g., VPN use and best practices, authentication/authorization solutions, firewall changes, EDR, A/V, filesystem integrity monitoring, public key encryption, SSH, SSL/TLS, vulnerability assessment and remediation.)
Other related duties as assigned.