Campus Pride Jobs

The Wistar Institute is a world leader in early-stage discovery science in the areas of cancer, immunology, and infectious disease. Wistar is committed to accelerating research advances from bench to bedside through brilliant science and distinctive approaches to collaboration among scientific investigators and academic and industry partners. Wistar's dynamic environment supports the advancement of discoveries that will change the future of human health.

The Wistar Institute has an opening for a Senior Security Analyst to join the transformative Information Technology (IT) department. The position's primary focus is to maintain and improve Wistar's IT cybersecurity posture.   The ideal candidate will demonstrate technical expertise across multiple domains of the IT department, including security, server, network, and application initiatives.  This individual should have a strong, diverse technical background with security experience and a roll up your sleeve mentality who is looking to grow in their career path. In this role, the individual will:

• Take a lead role in the development, implementation, and maintenance of the IT security initiatives and Disaster Recovery Plan, including acting as the primary point of contact with external Managed Detection and Response (MDR) vendor.
• Implement and maintain security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and data encryption solutions, to protect against unauthorized access, malware, and other cyber threats.
• Ensure both new and current IT initiatives are completed within an agreed upon timeframe and delivered to user expectations. Communicate with decision makers and stakeholders to ensure understanding of deliverables and negotiate expectations.
• Conduct vulnerability assessments and penetration tests to identify and remediate security vulnerabilities in our information systems, applications, and infrastructure.
• Collaborate with cross-functional teams, including IT, Operations, and Compliance, to assess security risks, implement security controls, and respond to security incidents effectively.
• Stay informed about emerging threats, vulnerabilities, and security trends in the industry and recommend security enhancements or countermeasures to mitigate risks and improve security posture.
• Participate and develop security awareness training and education programs to promote a culture of security awareness and compliance among employees.
• Provide technical expertise, leadership, and project coordination services to drive projects, enable new implementations and facilitate ongoing improvements in our technical systems. 
• Partner with Application and Systems Teams to develop and implement solutions to complex problems.
• Develop and document necessary policies and procedures, training, and support materials; as well as maintain knowledgebase of best practices and processes.
• Act as backup to Systems Team, with the ability to step in to resolve issues with Windows and Linux servers, VMware, Isilon storage and high-performance computing cluster.
• Keep abreast of current technology; maintains expert knowledge of Wistar's supported hardware, software and security operations.
• Responsible for other tasks and special projects as directed.

Required Skills:

• Strong analytical and problem-solving skills.
• Familiarity with security best protocols and knowledge of frameworks like: NIST and ISO.
• Demonstratable knowledge of networking protocols, concepts (VLANs, ACLs, NAC, etc.) network architecture, firewalls, proxies, SIEM, antivirus, and IDPS concepts.
• Ability to present technical materials clearly to both technical and non-technical audiences.
• Proficient with or able to quickly learn to use a broad array of networking and systems hardware and software.
• Must demonstrate the ability to work with a wide variety of customers and colleagues, deli ering exemplary technical support.
• Ability to work independently and as part of a team; must maintain confidentiality of sensitive materials.
• Strong customer service orientation and excellent interpersonal, verbal and written communication skills.

Preferred Skills:

• Experience working with SIEM tools (Carbon Black and Windows Defender).
• Engagement and management of Managed Detection Response (MDR) vendors.
• Experience with NSPM-33 and NIST800-171 security requirements and assessments.
• Experience with backup software, VMware, Isilon, and high-performance computing clusters.
• Prior experience in a scientific research organization or educational organization.
• Experience with automating processes through scripting in PowerShell or other languages.
• Experience working in a Matrix-based cross-functional IT team beneficial but not required.

Qualifications:

A Bachelor's degree (or equivalent experience), preferably in Computer Science with a minimum of 4 years of IT experience[JM1] , is required. In addition, a minimum of 2 years working in a cyber security setting required. A combination of education, IT certifications, and a minimum of 8 years of IT experience supporting a variety of computing systems, software, and hardware will be considered in lieu of a bachelor's degree.

The Wistar Institute is located in the University City area of Philadelphia, in the heart of the University of Pennsylvania Campus. Wistar provides resources to its faculty and staff that enable them to conduct cutting edge collaborative research and provides outstanding intellectual environments and state-of-the-art facilities.

The Wistar Institute is committed to diversity, equity and inclusion (DEI). All candidates must share our commitment to DEI. The Wistar Institute is especially interested in qualified candidates who can contribute, through their research, mentoring, and/or service, to the diversity and excellence of our academic/research community.

We offer a competitive salary and excellent benefits package.

For more information about The Wistar Institute visit our website at www.wistar.org. 

It is the policy of the Institute to provide equal employment opportunities to all individuals regardless of race, citizenship, ethnicity, color, creed, religion, marital status, national origin, ancestry, sex, age, veteran status, mental or physical disability (including HIV and AIDS), pregnancy, caregiver status, domestic or sexual violence victim status, sexual orientation, gender identity and expression, or on the basis of genetic information, or any other characteristic protected by federal, state, or local law, with respect to all terms and conditions of employment.