Senior Security Engineer

About the role

The Senior Security Engineer will support and advance Harvard Medical School's application security, Secure SDLC, and penetration testing programs. This role partners closely with others across HMS IT and Security to enable the HMS mission.

Responsibilities

• Perform penetration testing of applications, systems, infrastructure, cloud environments, and emerging technologies.
• Identify security weaknesses and provide remediation recommendations through technical testing.
• Support Secure SDLC initiatives and collaborate with development teams to improve application security.
• Administer and support application security platforms and testing tools.
• Absorb and follow Harvard University IT technical standards, policies, and Code of Conduct.

Qualifications

• Minimum of seven years' post-secondary education or relevant work experience.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; or equivalent combination of education and relevant experience.
• Experience using common security testing and analysis tools.
• Ability to communicate technical security findings and remediation recommendations to both technical and non-technical audiences.
• Hands-on experience performing penetration testing of web applications, systems, networks, cloud environments, or APIs.
• Familiarity with common offensive security tools, techniques, and methodologies.
• Experience identifying, validating, and helping remediate common web application vulnerabilities (OWASP Top 10).
• Experience with Secure SDLC concepts and application security testing tools such as Checkmarx, Burp Suite, Veracode, GitHub Advanced Security, or similar platforms.
• Experience administering or supporting application security platforms preferred.
• Familiarity with software development practices and modern application architectures.
• Experience conducting threat research and analyzing emerging threats, vulnerabilities, attack techniques, and adversary activity.
• Experience creating technical reports and communicating security findings and remediation recommendations.
• Participation in cyber competitions (CTFs), cyber ranges, security research projects, bug bounty programs, red team exercises, or similar activities is highly desirable.
• Demonstrated analytical, problem-solving, and technical investigation skills.
• Demonstrated team performance skills, service-oriented mindset, and ability to collaborate effectively with technical and non-technical stakeholders.
• Strong desire to continuously learn and develop expertise in offensive security, application security, and emerging technologies.

Additional Information

Standard Hours/Schedule: 35 hours per week
Visa Sponsorship Information: Harvard University is unable to provide visa sponsorship for this position.
Pre-Employment Screening: Identity, Criminal Staying Informed About Your Application: Due to the high volume of applications, we may not always be able to reach out right away, but you can track your status anytime through the Careers@Harvard portal.
Work Format Details: This position has been determined by school or unit leaders that some of the duties and responsibilities can be effectively performed at a non-Harvard location. The work schedule and location will be set by the department at its discretion and based upon operational needs.
Certain visa types and funding sources may limit work location. Individuals must meet work location sponsorship requirements prior to employment.
Salary Grade and Ranges: This position is salary grade level 059. Please visit Harvard's Salary Ranges to view the corresponding salary range and related information.
Benefits: Harvard offers a comprehensive benefits package that is designed to support a healthy work-life balance and your physical, mental and financial wellbeing. Because here, you are what matters. Our benefits include, but are not limited to: Generous paid time off including parental leave Medical, dental, and vision health insurance coverage starting on day one Retirement plans with university contributions Wellbeing and mental health resources Support for families and caregivers Professional development opportunities including tuition assistance and reimbursement Commuter benefits, discounts and campus perks Learn more about these and additional benefits on our Benefits & Wellbeing Page.
EEO/Non-Discrimination Commitment Statement: Harvard University is committed to equal opportunity and non-discrimination. We seek talent from all parts of society and the world, and we strive to ensure everyone at Harvard thrives. Our differences help our community advance Harvard's academic purposes. Harvard has an equal employment opportunity policy that outlines our commitment to prohibiting discrimination on the basis of race, ethnicity, color, national origin, sex, sexual orientation, gender identity, veteran status, religion, disability, or any other characteristic protected by law or identified in the university's non-discrimination policy. Harvard's equal employment opportunity policy and non-discrimination policy help all community members participate fully in work and campus life free from harassment and discrimination.