What are the responsibilities and job description for the Sr Cyber Security Engineer position at Charles R. Drew University of Med & Sc?
TITLE: SR. CYBER SECURITY ENGINEERDEPARTMENT: Information SystemsLEVEL: 3 JOB CODE: SRCSEDATE: 03/02/2026REPORTS TO: Chief Information OfficerSALARY GRADE: ISTP 6DLSE STATUS: ExemptUnder the general direction of the Chief Information Officer (CIO), the Sr. Cyber Security Engineer is a senior-level security professional who plans and designs security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Designs action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats.The position is a hands-on engineering role with responsibilities for building technical controls as well as acting as a cyber security subject matter expert. In this role the incumbent will collaborate closely within the IT infrastructure team to ensure security controls are present in all technical systems. The Sr. Cyber Security Engineer will be responsible for the full security stack including identifying security issues, protecting existing systems, detecting anomalies, responding to incidents, and facilitating their recovery. Successful candidates will have an expert understanding of IT infrastructure, cyber security tools, cyber security theory and data management. The Sr. Cyber Security Engineer will be an experienced cyber security practitioner with demonstrated knowledge of threat management, threat intelligence, log telemetry, network, server, and endpoint security.Ideal candidates will have prior hands-on experience as both a system engineer and as a cyber security engineer. Candidates will be able to work in a multi-disciplined team handling multiple projects and priorities. The Sr. Cyber Security Engineer is responsive to changes in business and risk and is on the forefront of emerging technologies, driving new and better solutions to industry security needs.Essential Duties and Responsibilities:Design and build enterprise-class security systems for both production and corporate environments.Use and maintain software, such as firewalls and data encryption programs, to protect sensitive information.Check for vulnerabilities in computer and network systems.Recommend security enhancements to management or senior IT staff.Proactively seek security gaps with respect to current and projected business direction and spearhead solutions to address those gaps.Design and contribute heavily to network architecture including firewalls, WAFs, network segmentation, VLANs, VPNs, and DoS/DDoS mitigation.Create solutions that enhance cloud security using available cloud controls/products, third party products, and/or custom-developed systems.Understand corporate authentication and authorization systems including AD, LDAP, ADFS, Azure MFA and how to design secure corporate systems with them.Understand corporate enterprise tools such as Microsoft Office 365 (A5).Develop security standards and best practices for the university.Innovate new security systems to address the unique needs of the platform.Lead multi-disciplined teams though security initiatives and projects.Review and approve security architecture for new projects or changes to existing systems.EDUCATION:Bachelor’s degree (B.A., B.S.) in computer science, information technology, cyber security or closely related field from an accredited institution.Network Certifications: CCNA (or similar)Security Certifications: Security , CISSP, OSCP (or similar) EXPERIENCE:5 years or more experience in information technologyAt least 2 years specifically managing information security within an enterprise.TECHNICAL KNOWLEDGE: Experience working with various NIST compliance standards.Must be detail oriented; able to detect cyberattacks and watch for minor changes in performance.Ability to respond to security alerts and uncover and fix flaws in computer systems and networks.Able to effectively communicate information security needs and potential threats to technical and nontechnical audiences within the university.Expert knowledge in managing Fortinet, Palo Alto, or similar next gen Firewalls.Solid experience managing a virtualized environment using HyperV, Vmware or similar.Expert knowledge of access logging, centralized logging, and monitoring/alerting security log events such as ELK or Splunk.Knowledge of practical encryption methodologies and practices within an enterprise.Experience with securing Infrastructure as a service platform such as Azure or AWS.Detailed knowledge of network and infrastructure security issues and considerations.Expert knowledge Expert knowledge of incident response, threat modeling, and mitigation.Expertise in identifying security design gaps in existing and proposed architectures and recommend changes or enhancements.COMPLEXITY:The ability to perform highly detailed work with sustained attention and care while providing/obtaining information on numerous inquiries is paramount to success in this position.PHYSICAL DEMANDS:The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Occasional stooping. Frequent standing. Constant walking, sitting, climbing, reaching high/low levels, finger movement, feeling, speaking clearly, hearing conversationally, and seeing far and near.WORK ENVIRONMENT:This position is on site unless otherwise authorized by management.The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Occasionally required to work in confined space. MENTAL DEMANDS:The mental demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Frequent variety of unrelated tasks. Constant calculating, interrupted work, a variety of interrelated tasks, and use of sustained concentration, reasoning, judgment, resourcefulness, analytical ability, and ingenuity.Special Requirements:Ability to work effectively with a diverse community.