Harvard Business School is hiring a
Cloud Security Engineer

Position Description
Are you a passionate Cloud Security Engineer ready to make a significant impact in a dynamic IT environment? Join our innovative team at Harvard Business School (HBS) IT, where you will play a crucial role in shaping the future of cloud security. This is not just another job; it’s an extraordinary opportunity to collaborate with industry leaders, tackle sensitive security issues, and drive the implementation of cutting-edge cloud security practices. If you are looking for a place to unleash your expertise and creativity, this is the perfect opportunity for you!

The Cloud Security Engineer will work closely with various stakeholders, both within and outside our organization, to ensure the highest standards of cloud security. This position will be at the forefront of integration of our Cloud Security Posture Management (CSPM) platform with AWS and Azure environments, and will develop robust policies, reports, and alerts. The Cloud Security Engineer directly contributes to the enhancement of our security posture and ensures that our cloud infrastructure is resilient and secure.

The Cloud Security Engineer will be involved in the development and implementation of automated remediation capabilities within the CSPM, to streamline and automate our security processes and mitigate potential threats proactively. With a strong emphasis on collaboration, innovation, and continuous improvement, this position offers a unique blend of technical challenge and professional growth. If you are driven by the desire to make a real difference in cloud security, HBS IT is the place to be.

Responsibilities:

• Collaborate with internal and external stakeholders to ensure cloud security policies and practices are understood and implemented.
• Work with the HBS IT Security organization to align cloud security measures.
• Improve the CSPM platform by keeping track of outputs and suggesting improvements.
• Integrate CSPM with AWS and Azure cloud environments.
• Develop policies, reports, and alerts within the CSPM.
• Implement automated remediation capabilities within the CSPM.
• Participate in code reviews, focusing on security-related concerns such as enforcing consistency in Cloud IAM permissions, protecting applications from dependency chain attacks, and ensuring supporting operating systems can be appropriately patched and updated.
• Self-starter with the ability to work independently or as part of a project team.
• Complete other responsibilities as assigned.

Basic Qualifications
Minimum of seven years’ post-secondary education or relevant work experience.

Additional Qualifications And Skills
The following are preferred:

• Proficiency in scripting and automation (e.g., Python, PowerShell).
• Proven experience in cloud security, particularly with AWS and Azure.
• Effective written and oral communication skills.
• Experience with cloud identity and access technologies.
• Knowledge of advanced AWS IAM concepts such as permissions boundaries.
• Knowledge of security tools such as AWS Config, Azure Policy, GuardDuty, Azure Security Center, WAF, and Splunk.
• Experience with design and implementation of systems for high availability, security, manageability, and reliability.
• Experience supporting network, security, and system engineering teams.
• Experience with infrastructure as code (e.g., Terraform, CloudFormation, ARM) and GitHub.
• Hands-on experience with Security Information and Event Management (SIEM) systems such as Splunk.

Certificates and Licenses
The following are preferred:

• AWS Solutions Architect, AWS Security Architect or Azure Security Engineer Associate.
• CISSP, CPP, CCSP, OSCP, CEH.

Working Conditions
Additional support outside of regularly scheduled hours, including early mornings, nights, weekends, and holiday breaks, may occasionally be required.

Additional Information
This role is a hybrid position which we consider to be a combination of remote and onsite work at our Boston, MA-based campus. HBS expects all staff to be onsite at least three days per week and for departments to provide onsite coverage Monday – Friday. Specific hours and days onsite will be determined by business needs and are subject to change with appropriate advanced notice. We may conduct candidate interviews virtually (phone and/or via Zoom) and/or in-person for this role. Harvard Business School will not offer visa sponsorship for this opportunity.

Culture of Inclusion:
The work and well-being of HBS is profoundly strengthened by the diversity of our network and our differences in background, culture, national origin, religion, sexual orientation, and life experiences. Explore more about HBS work culture here: https://www.hbs.edu/employment.

About Us:
Harvard Business School (HBS) IT is a nimble, innovative, strategic partner who crafts, delivers, and supports the pioneering technology solutions that connect, enable, and inspire the HBS community to educate leaders who make a difference in the world. Visit our website for more information https://www.hbs.edu/information-technology/about-us.

Benefits
We invite you to visit Harvard's Total Rewards website (https://hr.harvard.edu/totalrewards) to learn more about our outstanding benefits package, which may include:

• Paid Time Off: 3-4 weeks of accrued vacation time per year (3 weeks for support staff and 4 weeks for administrative/professional staff), 12 accrued sick days per year, 12.5 holidays plus a Winter Recess in December/January, 3 personal days per year (prorated based on date of hire), and up to 12 weeks of paid leave for new parents who are primary care givers.
• Health and Welfare: Comprehensive medical, dental, and vision benefits, disability and life insurance programs, along with voluntary benefits. Most coverage begins as of your start date.
• Work/Life and Wellness: Child and elder/adult care resources including on campus childcare centers, Employee Assistance Program, and wellness programs related to stress management, nutrition, meditation, and more.
• Retirement: University-funded retirement plan with contributions from 5% to 15% of eligible compensation, based on age and earnings with full vesting after 3 years of service.
• Tuition Assistance Program: Competitive program including $40 per class at the Harvard Extension School and reduced tuition through other participating Harvard graduate schools.
• Tuition Reimbursement: Program that provides 75% to 90% reimbursement up to $5,250 per calendar year for eligible courses taken at other accredited institutions.
• Professional Development: Programs and classes at little or no cost, including through the Harvard Center for Workplace Development and LinkedIn Learning.
• Commuting and Transportation: Various commuter options handled through the Parking Office, including discounted parking, half-priced public transportation passes and pre-tax transit passes, biking benefits, and more.
• Harvard Facilities Access, Discounts and Perks: Access to Harvard athletic and fitness facilities, libraries, campus events, credit union, and more, as well as discounts to various types of services (legal, financial, etc.) and cultural and leisure activities throughout metro-Boston.

Job Function: Information Technology
Department Office Location: USA - MA - Boston
Job Code: I0959P IT Infrastructure Prfsnal V
Work Format: Hybrid (partially on-site, partially remote)
Sub-Unit: Salary Grade 059
Department: Information Technology
Annual Salary Range: $150,000 - $155,000, salary commensurate with experience
Union: 00 - Non Union, Exempt or Temporary
Time Status: Full-time
Pre-Employment Screening: Criminal, Identity
Schedule: 40 hours per week minimum, to be determined by manager.

Commitment to Equity, Diversity, Inclusion, and Belonging:
Harvard University views equity, diversity, inclusion, and belonging as the pathway to achieving inclusive excellence and fostering a campus culture where everyone can thrive. We strive to create a community that draws upon the widest possible pool of talent to unify excellence and diversity while fully embracing individuals from varied backgrounds, cultures, races, identities, life experiences, perspectives, beliefs, and values.

EEO Statement:
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, gender identity, sexual orientation, pregnancy and pregnancy-related conditions, or any other characteristic protected by law.