HHMI is focused on supporting and moving science forward in a variety of different ways ranging from conducting basic biomedical research, empowering educators, inspiring students, developing the next generation of scientists - even stretching into film and media production. Our Headquarters is in the greater Washington, DC metro area and is home to over 300 employees with expertise in investments, communications, digital production, biomedical sciences, and everything in between. The work housed here supports and augments the groundbreaking research conducted in HHMI labs across the nation. As HHMI scientists continue to push boundaries in laboratories and classrooms, you can be sure that your contributions while working here are making a difference.

Summary:

The Senior Security Engineer is responsible for designing, implementing, managing, documenting, and supporting the information security and network infrastructure of a complex high-performance network. The role serves as a technical lead and mentor to other security engineers in the team. They will handle the implementation of an information security policy and network structure to support it. This includes high-performance firewalls, Intrusion Detection (IDS), Virtual Private Networks, endpoint protection software and intelligent network sensors.

They collaborate to develop a cohesive information security environment that facilitates efficient and effective interoperability of systems and stays abreast of emerging technologies and solutions to continually improve the quality and effectiveness of information security. Additionally, this role will also be responsible for reporting potential threats as well as measuring the effectiveness of current systems and policies.

The person in this role will primarily focus on security, but they will also serve as a backup for the networking engineer when they are unavailable.

This role will follow our hybrid model which includes reporting in person to our headquarters in Chevy Chase, MD three days each week.

We encourage qualified candidates who are eligible to work in the United States to apply. Please note we are not able to sponsor a visa for this position at this time.

What we deliver:

• A team that cultivates a strong collaborative and learning environment where we strive for all members of the team to help each other and continue career-long learning by having opportunities in areas outside of their primary roles and exploring new technologies.

• HHMI is constantly renewing its technology. In this position, you will have the opportunity to use the latest and greatest technologies.

• A competitive compensation package that includes up to $10,000 in educational reimbursement each year and a significant budget for professional development.

What you'll do:

• Lead incident response and remediation on suspected infected host systems.

• Develop security hardening policies and procedures for servers and desktops which run operating systems, including Linux, Mac OSX and Windows.

• Develop and implement standard process firewall policies.

• Analyze traffic flows and patterns to identify malware, viruses and denial of service attacks impacting users and/or network resources.

• Administrate the F5 BigIP LTM

• Administrate the Palo Alto Networks firewalls

• Administrate the FortiNet FortiNAC system.

• Administrate the Splunk logging server and develop HHMI's alerting and automated response capabilities.

• Respond to alerts from information security tools.

• Report, investigate, and resolve security incidents.

• Develop and refine systematic processes for testing, managing, monitoring, and logging upgrades, patches, and security enhancements all workstation systems and servers.

• Monitor, analyze, and maintain systems and procedures to safeguard internal information systems, network, databases, and Web-based security.

• Lead projects/processes.

• Proactively research emerging cybersecurity threats and advise on how to best protect HHMI's assets.

• Proactively identify security gaps and work with both management and other staff members to address the gaps through processes, policies, or technology.

• Serve as the point of contact to assist and coordinate with outside vendors to accomplish needed work in our facilities.

• Assist network engineers to support the wireless, wired and VOIP networks.as needed.

What you bring:

• Bachelor's degree in information technology or cybersecurity or equivalent education and experience.

• CISSP certification preferred.

• Other industry certifications such as GIAC GSOC, GIAC GCED, Palo Alto Networks PCNSE or Cisco CCNP Security, Enterprise, Collaboration or Data Center a plus

• Minimum of 6 years of experience working as a security professional in an enterprise network

• Six years of industry experience in an implementation and support role of Enterprise level Firewall devices

• Six years of industry experience in an implementation and support role of Intrusion detection devices

• Experience with F5 BigIP LTM

• Experience in supporting network and VoIP in Lab research environment.

• Ability and experience in finding creative solutions for threats to data and networks.

• Skilled in researching both commercial and open-source options. Skilled in gleaning relevant information from several sources and mediums.

• Proven skill and experience in monitoring several sources of information and properly classifying threats.

• Refined ability to communicate security requirements to project teams based on understanding of approved security policies, standards, and baselines.

• Must be results oriented with strong customer service skill in dealing with end-users and co-workers.

• Ability to effectively work in a team environment, as well as lead team initiatives.

• Excellent organizational, time management, and service delivery skills.

Compensation and Benefits

Our employees are compensated from a total rewards perspective in many ways for their contributions to our mission, including competitive pay, exceptional health benefits, retirement plans, time off, and a range of recognition and wellness programs. Visit our Benefits at HHMI site to learn more.

Compensation Range

Pay Type:

HHMI's salary structure is developed based on relevant job market data. HHMI considers a candidate's education, previous experiences, knowledge, skills and abilities, as well as internal equity when making job offers. Typically, a new hire for this position in this location is compensated between the minimum and the midpoint of the salary range.

HHMI is an Equal Opportunity Employer