Carnegie Mellon University’s Information Security Office is seeking an IT Security Engineer to help investigate and respond to security incidents across a large, diverse, and technically complex university environment.This is a hands-on security position with a strong focus on incident response, digital forensics, security monitoring, and technical investigation. You will use endpoint, network, application, identity, and other security data to determine what happened, understand the scope and impact of an incident, preserve and analyze evidence, contain threats, and help affected teams recover securely.The environment is broad, and investigations frequently involve unfamiliar systems or technologies. One incident may require analyzing an endpoint compromise, another may involve reconstructing activity from network traffic and logs, while another may require learning enough about an application, operating system, or protocol to understand unexpected behavior.You do not need to be an expert in every technology or security discipline described in this posting. We are looking for strong technical fundamentals, investigative ability, curiosity, sound judgment, clear communication, and the ability to learn unfamiliar systems when an investigation requires it.If you enjoy understanding how systems work beneath the surface, following evidence until you can explain what happened, considering systems from both attacker and defender perspectives, or building tools to answer questions that existing products cannot, you may be a strong fit for this team.What You’ll Do:A significant portion of this position is dedicated to security incident response and digital forensics. Responsibilities include:Monitor and investigate alerts generated by network, endpoint, vulnerability, logging, and other security systems.Triage reported or suspected security events and determine whether they represent security incidents.Conduct technical investigations using endpoint artifacts, network tr
