How to Apply

Please attach a cover letter as the first page of your resume. It should address your specific interest in the position and outline your skills and related experience.

Summary

The Inter-university Consortium for Political and Social Research (ICPSR), based at the University of Michigan, is the world’s premier political and social science data archive. We operate a diverse environment across on premise and cloud systems, with an emphasis on security.  We provide data services to Federal agencies and are subject to FISMA Moderate requirements.  We also hold PHI and other sensitive data that falls under HIPAA.

We are looking for an experienced Security Analyst/Engineer to help us with our security and compliance efforts. This position will be a mix of security-related technical tasks and security policy & documentation.  This would be an excellent fit for a system administrator or DevOps engineer who is interested in moving deeper into security.

You will report to the DevOps team lead in Computing & Network Services.

Responsibilities*

• Work with the DevOps, software development, and security & privacy teams to secure our systems and software.
• Document applications and the system environment, both for internal use and to satisfy regulatory requirements.
• Support security & privacy team in external security evaluations and audits.
• Institute best practices for logging, reporting, and monitoring.
• Lead ICPSR’s network security efforts, including configuration of firewalls, VPNs, and cloud services.
• Work with DevOps and Dev teams to ensure that systems and software are patched and monitor the threat landscape.
• Ensure that appropriate security checks are integrated into our CI/CD pipeline(s).
• Work with the broader U-M security community to align our efforts with U-M policies and standards.
• Other duties as assigned.

Required Qualifications*

• Bachelor’s degree in Cyber Security, Computer Science, MIS, or a similar relevant field, or an equivalent combination of education and experience.
• 5 years of relevant work experience, including:
• Significant experience administering and securing Internet-connected applications and systems.
• Experience documenting systems and procedures to meet operational and regulatory requirements.
• Experience administering and securing AWS, Azure, or GCP services.

Desired Qualifications*

• Experience with Linux administration.
• ISC2, CompTIA, or similar security certification.
• Experience with NIST 800-53, NIST 800-171, and/or HIPAA requirements and audits.

Work Locations

This position allows flexible scheduling and a remote, hybrid, or fully on-site work environment.

Underfill Statement

This will be filled at the senior level salary range of $85,000-110,000. Candidates with lesser experience are encouraged to apply and may be considered at the intermediate level with a salary range of $70,000-85,000.

Additional Information

The Institute for Social Research (ISR) at the University of Michigan seeks to recruit and retain a diverse workforce as a reflection of our commitment to serve the diverse people of Michigan, to maintain the excellence of the university, and to ground our research in varied disciplines, perspectives, and ways of knowing and learning. For more about ISR’s commitment to Diversity, Equity and Inclusion, please click here.

Benefits at the University of Michigan

In addition to a career filled with purpose and opportunity, the University of Michigan offers an excellent benefits package to help you stay well, protect yourself and any eligible family members, and plan for a secure future.

Application Deadline

Institute for Social Research job openings are posted for a minimum of fourteen (14) calendar days. This opening may be removed from posting boards and filled any time after the minimum posting period has ended.

U-M EEO/AA Statement

The University of Michigan is an equal opportunity/affirmative action employer.