Career Center

A cover letter is required for consideration for this position and should be attached as the first page of your resume. The cover letter should address your specific interest in the position and outline your skills and related experience.

The Inter-university Consortium for Political and Social Research (ICPSR) is part of the Institute for Social Research (ISR) at the University of Michigan. The consortium maintains the world’s largest archive of social science data with 10,000+ studies relating to education, aging, criminal justice, substance abuse, terrorism, and more. A global leader in data science, ICPSR also supports continuing education in research design, statistics, and data analysis.

ICPSR operates a diverse environment across on-premise and cloud systems, with an emphasis on security. We are looking for an experienced Security Analyst to help us with our security and compliance efforts.  We provide services to Federal agencies and are subject to FISMA Moderate requirements.  We also have PHI and other sensitive data that falls under HIPAA.

You will report to the DevOps team lead in Computing & Network Services.

You Will:

• Work with the devops, software development, and security & privacy teams to secure our systems and software
• Document the software and computing environment, both for internal use and to satisfy regulatory requirements
• Support security & privacy team in external security evaluations and audits
• Institute best practices for logging, reporting, and monitoring
• Lead our network security efforts, including configuration of firewalls, VPNs, and cloud services
• Work with devops and dev teams to ensure our systems and software are patched and monitor the threat landscape
• Ensure appropriate security checks are integrated into our CI/CD pipeline(s)
• Coordinate our efforts with the broader U-M security community
• Other tasks as assigned

• Bachelor’s degree in Cyber Security, Computer Science, MIS, or a similar relevant field, or an equivalent combination of education and experience
• 5 years experience securing Internet-connected applications and systems
• 3 years experience documenting systems and procedures to meet operational and regulatory requirements
• 3 years experience securing AWS, Azure, or GCP services

• ISC2, CompTIA, or similar security certification
• Experience with NIST 800-53, NIST 800-171, and/or HIPAA requirements and audits
• Experience with Agile software development and CI/CD / GitOps tools

This will be filled at the senior level salary range of $85,000-110,000.  Candidates with lesser experience are encouraged to apply and may be considered if the primary goal is not met. Lesser-experienced candidates will be reviewed at an intermediate level salary range of $70,000-85,000.

The Institute for Social Research at the University of Michigan wants to employ a diverse workforce as a reflection of our commitment to serve the diverse people of Michigan, to maintain the excellence of the university, and to ground our research in varied disciplines, perspectives, and ways of knowing and learning.

We have returned to in-person work at our offices in Ann Arbor, MI, but we support hybrid work schedules.