IT Security Engineer

The JCVI is a not-for-profit research institute in Rockville, MD and La Jolla, CA dedicated to the advancement of the science of genomics; the understanding of its implications for society; and communication of those results to the scientific community, the public, and policymakers.

- Serves as a security engineer. Responsible for the security and integrity of the JCVI network. Investigate and analyze traffic behavior and patterns, identify security vulnerabilities and compromised systems. - Perform frequent external and internal vulnerabilities scans to identify security risks, threats and vulnerabilities of networks systems and applications. Offer suggestions and work with system owners to remedy problems. Document findings and resolution. - Manage and administration of the following systems and services; firewalls, instruction detection system, virtual private network server, mail gateways, domain name severs, and web load balancers. - Enforce, update and communicate security policy. Ensure that the policy is up to date with the security requirements. - Work with other members throughout the organization to ensure that we are in compliance. - Evaluates the need for and effectiveness of new computer and network technologies in conjunction with the Team Lead and/or Computer Systems Manager and other Information Technology staff. Interacts with vendors and outside service providers. - Identify virus infections and alert required personnel to address problems immediately. - Assist with the administration of network routers, switches, voice and video infrastructure. - Perform daily security analysis and monitoring to identify possible intrusions - Monitor network usage - Assist Web team in managing web sites including web security, web server configuration, and front end support. - Performs backups and archives of data generated at JCVI. Develops and maintains automated procedures and safeguards for these purposes - Plays an active role in the technical infrastructure decision-making process which includes, but is not limited to: system and network capacity planning, security considerations, data integrity and availability, and recovery procedures. - Provides JCVI staff with technical support and works to understand their computing requirements. Supports Faculty, Software Engineers, Database Administrators, and other Information Technology staff. Trains junior members of the Information Technology team. - Implements software and hardware to enhance administration tasks, data throughput and analysis. Documents all operational activities. - Responsible for the integration of environmental, health and safety protocols into work activities. This includes reporting potential hazards and when necessary helping to implement solutions to ensure safety and respect for the environment. - Performs other duties as assigned. - Strictly adheres to all documented JCVI policies and procedures to include carrying out all functions required of Institute employees (i.e. completion of time-sheets in an accurate and timely manner).

Qualifications Prerequisites - Bachelor’s degree in Computer Science or related field, or equivalent (two years of applicable experience) plus minimum of 5 years experience as a systems administrator performing duties similar to the above. Or a Master’s degree in Computer Science or related field with a minimum of 3 years experience as a systems administrator performing duties similar to the above required. - Sound understanding of the OSI, ability to characterize and discuss findings at all layers of the OSI model from Physical Layer to Application Layer. - Demonstrated experience in implementing, administering, and troubleshooting firewalls, security appliances, routers, switches, controllers, log server and monitoring applications - Experience enforcing security policy and knowledge of FISMA requirements. - Expert knowledge in LAN/WAN, video, and telecommunication systems design, engineering, and administration. In-depth understating of various networking and application level protocols such as TCP/IP, SSL/TLS, DNS, DHCP, WINS, NTP, HTTP, SMTP, CIFS, LDAP - Familiarity with Infoblox, Cisco VoIP infrastructure, Tandberg MCU, and TMS, Cisco IDS, Cisco NAM, Cisco Wireless LAN Controller, F5 Load Balancers and Splunk. - Experience with Cloud Security. - Hands on technical experience working with VPN technologies; IPSEC, SSL, WebVPN, Any Connect, etc - Ability to quickly handles cyber-attack incident, forensic support risk assessment and remediation - Experience using security tools to detect vulnerabilities and to mitigate security attacks. - Demonstrated troubleshooting experience is required; Web administration experience is a plus. - Excellent organization and time management skills. Flexibility to handle a variety of tasks and shift priorities simultaneously. - Strong interpersonal skills; ability to effectively interact with all levels of staff and external contacts; ability to work as an effective team member. - Cooperative and service-oriented attitude; must be able to work under pressure and maintain a professional demeanor. - High level of discretion for confidential work and information; ability to appropriately handle critical information and sensitive situations. - Ability to use sound judgment to effectively solve problems within the scope of the position. - High level of initiative and ability to work with minimum supervision. - Superior verbal and written communications skills.