Project Title: Information Security Analyst/Developer

 

Mentors

Andrew Adams, Principal Information Security Officer
Shane Filus, Information Security Engineer
Derek Simmel, Senior Information Security Officer

 

Abstract

Pittsburgh Supercomputing Center, a national leader in data-intensive, high-performance computing, is perpetually striving to improve the security of its high performance computing resources and cyberinfrastructure.  To this end, we are currently seeking undergraduate interns to collaborate with PSC staff on the development and implementation of information security tools, controls and techniques to enhance PSC’s security posture.  Examples of possible projects include:
  • Developing an asset inventory to be used for migration to a zero-trust architecture
  • Performig an asset-based risk assessment
  • Performing behavioral analysis over NetFlow or other layer-2, layer-3 or layer-4 networking data
  • Developing a database of logins to PSC resources, issuing alerts to the security team of authentications from new locations from the user’s profile and/or suspicious activity
  • Developing a database of PSC assets used for tracking, vulnerability scanning and remediation, scheduling and sending notifications, triggering events
  • Auditing software packages, system configuration and hardening, converting PSC scripts to RPMs, and other security software/system administration
  • Evaluating the features and performance of new security technologies
  • Developing a system to migrate internally-hosted system configurations to external repos.

 

Research & Development Focus

  • Improving of security environment through analysis of data
  • Enhancing security environment through development of systems/tools

 

Learning Focus

  • Behavioral analysis
  • Information security workflows and use-cases

 

Desired Results

  • Security-minded students will actively improve PSC’s cyberinfrastructure

 

Desired Qualifications

  • Required: some experience in Linux or BSD
  • Required: some experience with Perl, Python or shell scripting
  • Required: some knowledge of layer-2, layer-3 and TCP/IP networking
  • Required: some knowledge of cryptographic operations, e.g., public-key, symmetric, hashes, and certificate creation and validation
  • Desired: some experience with authentication and authorization, e.g., access-control lists, PAM, Kerberos, and LDAP
  • Desired: some experience with security mechanisms, e.g., SSH, firewalls, intrusion detection systems, and vulnerability scanning
  • Desired: some experience with identity and access management (IAM)

 

Desired Major

Computer Science, Electrical/Mechanical/Civil/Computer Engineering

 

Compensation

The student in this position will receive an hourly wage.

 

Please submit your resume and cover letter to Vivian Benton, benton@psc.edu.
The deadline to apply is March 31, 2020.