IT Security Analyst/Engineer - Pittsburgh Supercomputing Center (PSC)

Carnegie Mellon University•Pittsburgh, PA

2d•Onsite

About The Position

The Pittsburgh Supercomputing Center (PSC) is seeking an Information Security Analyst/Engineer. This role is part of PSC’s small, streamlined security team, reporting to PSC’s Principal Information Security Officer (PISO). The position will participate in discussions regarding the improvement of PSC’s security posture by leveraging evidence-based standards and threat intelligence sharing. PSC is a joint research center of Carnegie Mellon University and the University of Pittsburgh, providing researchers with access to powerful systems for advanced computational research, communications, and data storage. PSC advances science across various fields including artificial intelligence/machine learning, medical imaging, weather modeling, cell biology, and genomics.

Requirements

Bachelor's Degree in Computer Science, Information Security, Information Assurance, or related field, e.g., Electrical Engineering.
Understanding of networking protocols, secure coding guidelines and cloud security.
Understanding of cryptography (symmetric & asymmetric).
Understanding of access control principles (e.g., DAC, MFA) and methods (password-based, public-key authentication, Kerberos, etc.).
Experience with networking security protocols (SSL/TLS, HTTPS, DNSSEC, Response Policy Zones).
Ability to communicate security concepts effectively in writing.
A combination of education and relevant experience from which comparable knowledge is demonstrated may be considered.

Nice To Haves

Understanding of frameworks and regulations including: NIST, HIPAA, NSPM-33, dbGaP, FedRAMP and Research Security is preferred.

Responsibilities

Work closely with PSC’s networking group to develop, implement, and tune network-based security tools and processes.
Develop, implement, document, and tune systems, processes, and/or policies that improve PSC’s security posture.
Set up, configure, and review events and/or logs governing security metrics.
Respond to any information security incidents that transpire.
Communicate with staff and/or PSC users regarding potentially complex security-related technologies and/or processes (e.g., VPN use and best practices, authentication/authorization solutions, firewall changes, EDR, A/V, filesystem integrity monitoring, public key encryption, SSH, SSL/TLS, vulnerability assessment and remediation).