Job Description

INFORMATION SECURITY ENGINEER, Sloan School of Management-Technology Services, to work under the guidance of the director and be responsible for supporting the implementation of security and risk management programs across the school. Key functions include providing consulting and assistance for data use agreements and data security processes; ensuring the collection of and reporting on key metrics related to protection of information assets and infrastructure; and collaborating with STS staff and MIT security staff to monitor Sloan security controls, analyze system logs for security events, and gather threat intelligence to assure overall security of the Sloan community, IT assets, and infrastructure.

A full job description is available at https://web.mit.edu/sloan-hr/jobs/STSSecurityEngineerJD.pdf.

Job Requirements
REQUIRED: bachelor's degree in a technology field; five years of relevant experience; knowledge of security issues and remediation techniques; knowledge of critical security controls, preferably NIST Cyber Security Framework; and familiarity with secure coding practices, ethical hacking, and threat modeling. PREFERRED: working knowledge of scripting languages, e.g., PowerShell, Python, and Perl; solid understanding of and experience managing computers and users on a network and understanding how systems interoperate; possession of or willingness to work towards a related security certification (e.g. CISSP, SANS GSEC); familiarity with standard principles of project management; attention to detail; and ability to operate both independently and on a team. Job #20949-9

3/14/22