What We Do:
Our team, within the Cyber Risk and Resilience Directorate researches, designs, and develops software tools for the collection, storage, and analysis of network data to provide security insights. We provide both the core network tools to facilitate this capability, and prototypes of new methods to present the data most effectively. We work with data at a scale generally not experienced by most organizations, handling record counts in the tens of billions per day.
Developing security insights at this scale requires creativity, efficiency, and contemporary knowledge of modern computing platforms. In some cases, the computing has outpaced the methods, and it is incumbent upon us to generate novel views of both the entire data collection, and of focused datasets tailored to specific analyst needs.
Our network situational awareness security tools are published here: https://tools.netsa.cert.org/
Position Summary:
As a network security researcher on the Network Situational Awareness team, you will research network threats to develop methods of detection and tailor these for partner environments. Transition of this research will take the form of developing detection capabilities, providing new requirements and feature requests for our NetSA Security tool suite, writing publications, and providing customer-specific training. The primary network data source for the team is netflow combined with application layer metadata, with an expanding focus on host-based (e.g., EDR) and cloud telemetry.
You will be responsible for gaining insights from data to facilitate detections, working with partners to help them to better understand their data and researching new data sources to expand the expertise of the team.
Requirements: (education/travel/background ONLY)
- Bachelor's Degree in Computer Science or a relevant technical discipline with three (3) years of relevant work experience; or a MS in Computer Science or a relevant technical discipline with one (1) year of relevant work experience; or a PhD in Computer Science or other relevant technical discipline.
- Movement between buildings within the SEI and CMU community required.
- Willingness to travel to various locations to support the SEI’s overall mission. This may include national travel to sponsor sites, conferences, and offsite meetings on occasion.
- You will be subject to a background check and will need to obtain and maintain a Department of War security clearance.
Knowledge, Skills and Abilities:
Exposure to translating threat intelligence to avenues for research, prototyping, and curation of detection capabilities.
Solid knowledge of network fundamentals, common application layer protocols, and network-based telemetry.
Proficiency in at least one scripting or programming language such as Python, Go, Ruby, C, Java, or Scala.
Solid problem-solving and analytical skills, detailed research, and ability to document and communicate ideas and findings to diverse audience.
Desired Experience:
Hands-on experience in a security research, threat hunting, detection engineering, or SOC Analyst role.
Some experience analyzing network telemetry such as netflow, application metadata, or PCAP from network sensors such as YAF, Zeek, Suricata, etc;
Exposure to cybersecurity data science methods and practices
Awareness of open-source and / or commercial Internet intelligence telemetry and datasets
Awareness of the threat landscape and experience researching and investigating threats
Experience presenting technical topics
Joining the CMU team opens the door to an array of exceptional benefits.
Benefits eligible employees enjoy a wide array of benefits including comprehensive medical, prescription, dental, and vision insurance as well as a generous retirement savings program with employer contributions. Unlock your potential with tuition benefits, take well-deserved breaks with ample paid time off and observed holidays, and rest easy with life and accidental death and disability insurance.
Additional perks include a free Pittsburgh Regional Transit bus pass, access to our Family Concierge Team to help navigate childcare needs, fitness center access, and much more!
For a comprehensive overview of the benefits available, explore our Benefits page.
At Carnegie Mellon, we value the whole package when extending offers of employment. Beyond credentials, we evaluate the role and responsibilities, your valuable work experience, and the knowledge gained through education and training. We appreciate your unique skills and the perspective you bring. Your journey with us is about more than just a job; it’s about finding the perfect fit for your professional growth and personal aspirations.
Are you interested in an exciting opportunity with an exceptional organization?! Apply today!
Location
Arlington, VA, Pittsburgh, PAJob Function
Software/Applications Development/EngineeringPosition Type
Staff – RegularFull Time/Part time
Full timePay Basis
SalaryMore Information:
Please visit “Why Carnegie Mellon” to learn more about becoming part of an institution inspiring innovations that change the world.
Click here to view a listing of employee benefits
Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.
Statement of Assurance
Skills Required
- Bachelor's degree in Computer Science or relevant discipline with 3 years' relevant experience; OR MS with 1 year relevant experience; OR PhD in relevant discipline
- Proficiency in at least one scripting or programming language (examples: Python, Go, Ruby, C, Java, Scala)
- Solid knowledge of network fundamentals and common application layer protocols and network-based telemetry
- Subject to background check and must obtain and maintain a Department of War security clearance
- Movement between buildings within the SEI and CMU community required (on-site presence)
- Willingness to travel nationally on occasion to sponsor sites, conferences, and offsite meetings
- Hands-on experience in security research, threat hunting, detection engineering, or SOC analyst role
- Experience analyzing network telemetry (netflow, application metadata, or PCAP) and familiarity with sensors/tools such as YAF, Zeek, Suricata
- Exposure to cybersecurity data science methods and practices
- Awareness of internet intelligence telemetry/datasets and threat landscape; experience presenting technical topics
Carnegie Mellon University Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Carnegie Mellon University and has not been reviewed or approved by Carnegie Mellon University.
-
Retirement Support — Retirement support is positioned as a standout, with automatic employer contributions to a TIAA-administered plan at 8% of base salary (and 9.78% for 9‑month academic appointments), plus optional employee deferrals. Vesting after three years is clearly specified, which helps set expectations for long-term value.
-
Parental & Family Support — Parental and family support is strengthened by 100% paid parental leave for six weeks and 100% paid maternity leave for 6–8 weeks (delivery-type dependent), effective July 1, 2024. Childcare support is also referenced through a Cyert Center subsidy up to $5,000 per family, alongside no-cost EAP access.
-
Wellbeing & Lifestyle Benefits — Wellbeing and lifestyle benefits include free Pittsburgh Regional Transit access and access to fitness classes and facilities, adding recurring non-cash value to the overall package. Pittsburgh’s relatively affordable cost of living can further increase the perceived adequacy of a given salary compared with higher-cost coastal hubs.
Carnegie Mellon University Insights
What We Do
Carnegie Mellon University founder Andrew Carnegie said: "My heart is in the work." No statement better captures the passion and drive of our people to make a real difference. At Carnegie Mellon, we're not afraid of the work. Our educational environment creates problem solvers, drivers of innovation and pioneers in technology and the arts. Employers in every field say our graduates are ready to hit the ground running the day they graduate. So, join us. Whether you're looking for a career or an education. Or both.
