Job Summary
:We are looking for a Google Cloud (GCP) Security Engineer to join our growing cloud platform team in designing, developing and security solutions to support our clinical research teams in GCP.
Conducts computer forensic investigations, data recovery and electronic discovery independently. Troubleshoots and resolves highly complex security issues. Functions as lead on projects. May lead teams. Coaches the development of other team members. Implements complex large/multiple development projects.
Additionally, you will be relied upon to ensure proper documentation is in place and our FISMA Moderate+ security concerns are met.
Key Responsibilities
TECHNICAL CAPABILITIES
INCIDENT RESPONSE - (INTERMEDIATE):
Demonstrates mastery of Security Incident Response in practical applications of a difficult nature. Participates in a computer security incident response team [CSIRT]. Prepares guidelines for forming and operating a CSIRT, as well as procedures for incident responses. Works with information security liaisons and/or other system administrators/engineers to analyze and resolve security incidents.
VULNERABILITY ASSESSMENTS (INTERMEDIATE):
Reviews core business applications and IT architectures to determine key vulnerabilities and countermeasures through theft of data, tampering of operations, or denial of service. Has solid experience with most of the following: network foot-printing, port scanning, and enumeration techniques, specific operating system vulnerabilities [like Win-NT, *nix,Win-2K, Solaris], web server vulnerabilities, application level exploits, worms, viruses, and Trojans, network vulnerabilities, sniffing, wireless sniffing, IP spoofing, and PPTP/VPN breaking.
ANOMALY DETECTION (INTERMEDIATE):
Demonstrates mastery of Anomaly Detection in practical applications of a difficult nature. Has experience with the three major types of anomaly detection used in network behavior analysis: Protocol which detects packets that are too short, have ambiguous options or violate specific application layer protocols, Rate-based which detects floods in traffic using a time-based model of normal traffic volumes, and, Relational or behavioral which detects changes in how individual or groups of hosts interact with one another on a network. Demonstrates knowledge of the major features and functions of the Company's Intrusion Detection Systems software.
ARCHITECT AND IMPLEMENT SECURE PLATFORMS (INTERMEDIATE):
Demonstrates mastery of cloud security access policies to develop Google IAM policies to enforce organizational security SOPs and federal regulatory compliance. Collaborate with application development teams to ensure security best practices are being followed.
SECURITY FORENSICS (INTERMEDIATE):
Demonstrates mastery of Digital Forensics in practical applications of a difficult nature. Possesses sufficient knowledge, training, and experience to be capable of successfully delivering Digital Forensics products and services without requiring support and instruction from others.
About the Department:
The Vanderbilt Institute for Clinical & Translational Research (VICTR) is Vanderbilt’s virtual home for clinical and translational research. Supported by Vanderbilt University Medical Center’s Office of Research and the NIH-sponsored Clinical and Translational Service Award (CTSA), the mission of the institute is to transform the way ideas and research discoveries make their way from origin to patient care. VICTR functions to help researchers and clinicians do their jobs better by providing tools and support to improve the quality of research, publications, grant writing, and training for future doctors and researchers.
Position Shift : Days
Discover Vanderbilt University Medical Center:
Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. It is a place where your diversity — of culture, thinking, learning and leading — is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.
VUMC Recent Accomplishments
Because we are committed to providing the best in patient care, education and research, we are proud of our recent accomplishments:
Basic Qualifications
POSITION QUALIFICATIONS :
Physical Requirements/Strengths needed & Physical Demands:
Movement
Sensory
Environmental Conditions
Vanderbilt University Medical Center
Nashville Tennessee
United States
Information Technology
(No Timezone Provided)
Job Summary
:We are looking for a Google Cloud (GCP) Security Engineer to join our growing cloud platform team in designing, developing and security solutions to support our clinical research teams in GCP.
Conducts computer forensic investigations, data recovery and electronic discovery independently. Troubleshoots and resolves highly complex security issues. Functions as lead on projects. May lead teams. Coaches the development of other team members. Implements complex large/multiple development projects.
Additionally, you will be relied upon to ensure proper documentation is in place and our FISMA Moderate+ security concerns are met.
Key Responsibilities
TECHNICAL CAPABILITIES
INCIDENT RESPONSE - (INTERMEDIATE):
Demonstrates mastery of Security Incident Response in practical applications of a difficult nature. Participates in a computer security incident response team [CSIRT]. Prepares guidelines for forming and operating a CSIRT, as well as procedures for incident responses. Works with information security liaisons and/or other system administrators/engineers to analyze and resolve security incidents.
VULNERABILITY ASSESSMENTS (INTERMEDIATE):
Reviews core business applications and IT architectures to determine key vulnerabilities and countermeasures through theft of data, tampering of operations, or denial of service. Has solid experience with most of the following: network foot-printing, port scanning, and enumeration techniques, specific operating system vulnerabilities [like Win-NT, *nix,Win-2K, Solaris], web server vulnerabilities, application level exploits, worms, viruses, and Trojans, network vulnerabilities, sniffing, wireless sniffing, IP spoofing, and PPTP/VPN breaking.
ANOMALY DETECTION (INTERMEDIATE):
Demonstrates mastery of Anomaly Detection in practical applications of a difficult nature. Has experience with the three major types of anomaly detection used in network behavior analysis: Protocol which detects packets that are too short, have ambiguous options or violate specific application layer protocols, Rate-based which detects floods in traffic using a time-based model of normal traffic volumes, and, Relational or behavioral which detects changes in how individual or groups of hosts interact with one another on a network. Demonstrates knowledge of the major features and functions of the Company's Intrusion Detection Systems software.
ARCHITECT AND IMPLEMENT SECURE PLATFORMS (INTERMEDIATE):
Demonstrates mastery of cloud security access policies to develop Google IAM policies to enforce organizational security SOPs and federal regulatory compliance. Collaborate with application development teams to ensure security best practices are being followed.
SECURITY FORENSICS (INTERMEDIATE):
Demonstrates mastery of Digital Forensics in practical applications of a difficult nature. Possesses sufficient knowledge, training, and experience to be capable of successfully delivering Digital Forensics products and services without requiring support and instruction from others.
About the Department:
The Vanderbilt Institute for Clinical & Translational Research (VICTR) is Vanderbilt’s virtual home for clinical and translational research. Supported by Vanderbilt University Medical Center’s Office of Research and the NIH-sponsored Clinical and Translational Service Award (CTSA), the mission of the institute is to transform the way ideas and research discoveries make their way from origin to patient care. VICTR functions to help researchers and clinicians do their jobs better by providing tools and support to improve the quality of research, publications, grant writing, and training for future doctors and researchers.
Position Shift : Days
Discover Vanderbilt University Medical Center:
Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. It is a place where your diversity — of culture, thinking, learning and leading — is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.
VUMC Recent Accomplishments
Because we are committed to providing the best in patient care, education and research, we are proud of our recent accomplishments:
Basic Qualifications
POSITION QUALIFICATIONS :
Physical Requirements/Strengths needed & Physical Demands:
Movement
Sensory
Environmental Conditions