Job Description:

• Security Operations: lead the implementation and monitoring of Globusâ™ security procedures and controls, including creating audit reports to meet target security compliance standards. Participate in incident response, as required. 

• Security Integration: Integrate security features into the software development life cycle, as well as existing services and infrastructure. Identify potential threats and vulnerabilities early in the development process through techniques like STRIDE and implement mitigating strategies.

• Architecture and Design: lead the definition and documentation of Cloud infrastructure architecture, including security, monitoring, logging, and deployment strategies, for the production and development environments.

• SRE/Operations: Deploy, operate, monitor, and maintain production Globus services for high availability.

• Support: As a technical consultant and resource for other team members, including the engineering and user support team, assist in addressing operational issues and troubleshooting.

• Designs new systems, features, and tools. Solves complex problems and identifies opportunities for technical improvement and performance optimization. Reviews and tests solutions to ensure appropriate standards are met.

• Utilizes technical knowledge of existing and emerging technologies, including public cloud offerings from Amazon Web Services, Microsoft Azure, and Google Cloud.

• Performs other related work as needed.

Preferred Qualifications

Experience:

• Strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management.

• Knowledge of the SDLC and experience integrating security best practices at every process stage.

• Understanding cloud security principles, including secure architecture design and configuration management.

• Knowledge of container security principles relating to Docker and AWS ECS.

• Good analytical problem-solving skills to scrutinize and solve very intricate security problems with effective solutions.

• System Administration, Operations Monitoring, Application Performance Monitoring, Logging, Incident and Problem Management.

• Use operational tools and monitoring platforms to gain in-depth knowledge, understanding, and ongoing system availability, performance, and capacity.

• Define requirements and develop tools and reporting as needed by projects and operations.

Technical Skills or Knowledge:

• Experience with threat modeling techniques and tools (e.g. STRIDE, Veracode, SonarCube, OWASP suite), as well as security frameworks and standards such as NIST 800-53, OWASP, and CIS Benchmarks.

• Experience developing in one or more scripting languages, preferably including Python and Bash, to automate, monitor and maintain infrastructure.

• Experience with Linux administration, troubleshooting, and management tools.

• Demonstrated experience with relevant AWS services including AWS IAM, VPC, WAF, KMS, EC2, RDS, DynamoDB, ElasticSearch, SQS, S3, ECS.

• A solid understanding of networking, firewalls, and DNS.

• Experience with monitoring solutions (e.g. AWS CloudWatch, Nagios).

• Expertise in common relational database administration tasks (e.g., PostgreSQL, MySQL, SQLite).

• Experience with CI/CD orchestration tools (e.g. GitHub Actions, Jenkins).

• Expertise with designing and building Infrastructure as Code (IaC) (Terraform, CloudFormation).

• Operational experience with web-servers (e.g. Apache, Nginx) and web-based technologies (e.g. RESTful APIs, SSL certificate management, TLS).

• Security Operations experience with public sector compliance regulations (e.g. FedRAMP, HIPAA, FISMA), as well as working with compliance teams and auditors to produce compliance records and artifacts.

Preferred Competencies

• Proficient in uniting cross-functional teams and communicating clearly, while fervently pursuing knowledge of the latest trends and technologies in security.

• Exposure to fundamental concepts, practices, and procedures of software development.

• Expertise in integrating development and deployment framework with the monitoring, operations, and orchestration required for running applications securely and at-scale on public cloud platforms.

• Problem solving skills.

• Ability to prioritize and manage workload to meet critical project milestones and deadlines.

• Ability to work in a collaborative team environment.

• Confidentiality related to sensitive University matters such as, strategic initiatives, trade secrets, quiet periods, and scientific discoveries yet to be put in the public domain.

• Passionate about continued learning and being aware of current security trends and technologies.

Working Conditions

• This job requires occasional evening or weekend hours.

• This job is a remote position with occasional attendance at in-person meetings required.

Application Documents

• Resume (required)

The University of Chicago is an Affirmative Action/Equal Opportunity/Disabled/Veterans Employer and does not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national or ethnic origin, age, status as an individual with a disability, protected veteran status, genetic information, or other protected classes under the law. For additional information please see the University's Notice of Nondiscrimination.

Staff Job seekers in need of a reasonable accommodation to complete the application process should call 773-702-5800 or submit a request via the Applicant Inquiry Form.

The University of Chicago's Annual Security & Fire Safety Report (Report) provides information about University offices and programs that provide safety support, crime and fire statistics, emergency response and communications plans, and other policies and information. The Report can be accessed online at: securityreport.uchicago.edu. Paper copies of the Report are available, upon request, from the University of Chicago Police Department, 850 E. 61st Street, Chicago, IL 60637.

About University of Chicago (UC)

One of the world's premier academic and research institutions, the University of Chicago has driven new ways of thinking since our 1890 founding. Today, UChicago is an intellectual destination that draws inspired scholars to our Hyde Park and international campuses, keeping UChicago at the nexus of ideas that challenge and change the world.

Connections working at University of Chicago (UC)