Remote. Occasional onstie at Mount Washington Campus. The manager will discuss with the applicants.

Johns Hopkins at Mt. Washington Campus
5801 Smith Ave., Davis Bldg.
Suite 3110
Baltimore, MD 21209

This position is responsible for using IT monitoring and logging systems for security incident response. These security monitoring systems will be used in collaboration with senior level staff to monitor for malware, compromised systems, compromised accounts, and general security incidents. This involves, but is not limited to: collecting and analyzing evidence, determining responsible parties, assessing damages, helping to correct security vulnerabilities, reporting incidents to appropriate authorities, and providing recommendations on revising security guidelines and procedures. This position will also work with engineers and administrators across Johns Hopkins to help provide guidance on proper logging, alerting, and security investigations. It is expected that the incumbent will be a self-starter and will act independently (with minimal supervision) in representing IT @ Johns Hopkins.

Develop solutions based on extensive technical knowledge, skills and experience; influence clients towards innovative/integrated solutions. Responsible for full life-cycle of medium to large sized complex projects; strong technical skills; strong ability to understand complex business processes. Complex and large projects typically are applications/systems with 501-3000 concurrent users requiring uptime commensurate with Clinical, Business critical, Education critical or Enterprise systems. Impacts of outages will cause major disruption such as implementation of downtime procedures, major disruption of business operations, and/or cascades to more than 7 systems/applications. Disruptions are without obvious or simple workarounds. Build and maintain client relationships through positive interactions. May provide assistance to lower level positions. Project scope can span an entire department, division, or enterprise-wide level. For enterprise-wide level typical projects impact the broader customer base of Johns Hopkins and its most mission critical systems. Projects often require interaction with various departments and teams both within and outside the department. Work is complex.

This position is responsible for using IT monitoring and logging systems for security incident response. These security monitoring systems will be used in collaboration with senior level staff to monitor for malware, compromised systems, compromised accounts, and general security incidents.

The scale is "big-E" Enterprise. All Hopkins affiliates, including international locales.
Users: 100,000+
Systems: 100,000+
Complexity is at the highest

Part of a weekly on call rotation for the services provided by the Enterprise Management, Monitoring, and Security (EMMS) team.

Bachelor's degree. Additional experience can be substituted for education. Equivalency Formula: 30 undergraduate degree credits or 18 graduate degree credits = 1 year of experience. For jobs where equivalency is permitted, up to two years of non-related college coursework may be applied towards the total minimum education/experience required for the respective job.

Required Experience: Five years related experience. Additional education can be substituted for experience.

Preferred Job Qualifications:

Minimum qualifications:

Knowledge of scripting technologies (e.g. PowerShell, VBScript, Command Line, Python) and Operating System (e.g. Windows, OSX, Linux) administration and logging. skills. An understanding of ITIL processes or ITIL foundations certification is desired. Excellent verbal and written communication, customer service skills, and a highly collaborative approach is essential to the success of this position.

Preferred qualification:

Knowledge of IT Security Monitoring and Logging systems such as Splunk Enterprise, Splunk Enterprise Security and forensic tools such as sysinternals and Encase. Knowledge of application logging from SQL, IIS, and Apache.