below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$145,700–$202,800.
Based on 240 similar postings.
Employer
About Carnegie Mellon University
Carnegie Mellon University is a leading private research university in Pittsburgh, Pennsylvania, internationally recognized for programs in computer science, engineering, business, the arts, and artificial intelligence. Industry: Higher Education & Research
Carnegie Mellon University currently has
71 open roles
on FindRole.
The IT Security Engineer joins the Information Security Office to investigate and respond to security incidents across a complex university environment. This hands-on role focuses on incident response, digital forensics, and security monitoring. You will triage alerts, analyze endpoint artifacts, reconstruct network traffic, and determine root causes for security events. Key responsibilities include performing host and network forensic analysis, preserving digital evidence for legal matters, and developing automation scripts to improve operations. You will utilize skills in Linux, Windows, and macOS, along with networking, identity, and application concepts. The role requires technical problem-solving to manage vulnerabilities and conduct authorized penetration testing. You will work with diverse stakeholders to contain threats and provide security guidance, ensuring the integrity of systems within a large, decentralized computing infrastructure.
Monitor and investigate alerts from network, endpoint, vulnerability, and logging security systems.
Triage reported security events to determine if they represent actual security incidents.
Conduct technical investigations using endpoint artifacts, network traffic, and system logs.
Determine the root cause, scope, timeline, and impact of security incidents.
Perform host and network forensic analysis to preserve and analyze digital evidence.
Recommend containment, eradication, and recovery actions for affected systems and accounts.
Develop scripts and automation to improve investigation workflows and security operations.
Participate in a shared 24x7 on-call rotation for incident response and monitoring.
What we're looking for
Bachelor’s degree or an equivalent combination of education, technical training, professional certifications, and relevant experience.
Three or more years of relevant technical experience in information security, IT, systems administration, networking, software engineering, infrastructure engineering, digital forensics, or a related discipline.
Hands-on experience with one or more major operating system environments such as Linux, Windows, or macOS.
Understanding of fundamental networking, operating system, and application concepts.
Ability to investigate technical problems methodically by gathering evidence, developing hypotheses, testing assumptions, and documenting conclusions.
Ability to analyze logs, system information, network activity, or other technical telemetry.
Ability to evaluate security threats and vulnerabilities in the context of a real environment.
Must qualify as a U.S. person under the applicable requirements governing this position.
Wright Patterson AFB, OH69 days ago
$99,000–$225,000
NIST Risk Management Framework (RMF)
Splunk
Palo Alto
Cisco
Elastic
AWS
Azure
JSIG
eMASS
Vulnerability Assessment
Data Transport
Big Data Analytics
DoD 8570
DoD 8140