Vulnerability, Threat and Exposure Management Engineer

Additional Qualifications and Skills

The following Additional Qualifications are strongly preferred. If you meet some, but not all, you are still encouraged to apply; we value employees with a willingness to learn :

• Proficiency in vulnerability scanning tools, threat intelligence platforms, and risk assessment methodologies.
• In-depth knowledge of CVSS scoring systems and ability to prioritize vulnerabilities based on organizational risk.
• Strong understanding of attack surface management and continuous monitoring techniques.
• Demonstrated experience with vulnerability management systems and data query tools.
• Familiarity with diverse areas of potential exposure, including but not limited to : application source code security, operational technology (OT) environments, container security, and cloud security posture. management (CSPM). While comprehensive expertise across all domains is rare, a strong understanding of at least two areas and willingness to learn and adapt to others is highly desirable.

Additional Information

Please provide a cover letter with your application.

Please note :

Accessibility :

Harvard University welcomes individuals with disabilities to apply for positions and participate in its programs and activities. If you would like to request an accommodation or have questions about the physical access provided, please contact our University Disability Resources Department.

EEO Statement

We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, gender identity, sexual orientation, pregnancy and pregnancy-related conditions, or any other characteristic protected by law.

Certificates and Licenses

Position Description

Harvard University Information Technology (HUIT) is a community of Information Technology professionals committed to delivering service and technological solutions in support of teaching, learning, research and administration. We are recruiting an IT workforce that has both breadth in their ability to collaborate and innovate across disciplines - and depth in specific areas of expertise. HUIT offers opportunities for IT professionals to learn and work in a unique technology landscape and service-focused environment. If you are a technically proficient, nimble, user-focused, and accountable IT professional who also connects with the importance of collaborating well in a team environment, we are looking for you!

This is a fully benefitted, full-time Harvard University position that has been funded through December 31, 2026. There is the possibility of renewal, contingent on funding and department & university priorities .

Harvard's Information Security and Data Privacy (ISDP) team is a prominent office with university-wide purview and an important purpose : to safeguard the systems and data that propel Harvard's noble mission and to bolster the university's trustworthiness as a steward of personal information. We're passionate about privacy and security, and our work is meaningful, impactful, and deeply rewarding.

In ISDP, team health comes first. We cultivate a culture of openness, positivity, growth, and trust. We even have a Chief Fun Officer role to arrange our team activities! Ours is a collegial environment where we support one another and where we encourage taking risks in the name of progress.

Want to be part of something new? At Harvard, we're taking the novel approach of fully integrating data privacy and information security into a single program that we're calling "PrivSec." By combining the two, these complementary pursuits can act in concert and on equal footing, where the whole is greater than the sum of its parts. Our PrivSec journey is just beginning, with strong potential for creating a new standard to be emulated elsewhere.

Principal Responsibilities : Lead comprehensive collaboration, design, development, and implementation of enterprise-wide vulnerability and threat exposure management strategies. Oversee the creation and execution of robust security architectures, solutions, and policies to proactively identify, assess, and mitigate cyber threats across the organization's attack surface.

Typical Core Duties :

Commitment to Equity, Inclusion, and Belonging

Harvard University views equity, inclusion, and belonging as the pathway to achieving inclusive excellence and fostering a campus culture where everyone can thrive. We strive to create a community that draws upon the widest possible pool of talent to unify this excellence while fully embracing individuals from varied backgrounds, cultures, races, identities, life experiences, perspectives, beliefs, and values.

Benefits

We invite you to visit Harvard's Total Rewards website (https : / / hr.harvard.edu / totalrewards) to learn more about our outstanding benefits package, which may include :

Work Format Details

This position is Hybrid (partially onsite / partially remote) with the possibility of fully remote.

Travel to campus may be necessary based on business needs and the nature of work and needs to be in accordance with HUIT policy. Examples include bi-annual or quarterly Town Halls, critical business meetings, and other work events.

About Us

More About HUIT :

Our Mission : huit.harvard.edu / about

We empower the Harvard community with essential and transformative technologies to advance education, knowledge, and discovery.

HUIT's core values are :

IT Academy (designed for IT Staff) :

HUIT's IT Academy aims to enable each IT staff person to grow professionally and become a trusted partner to her or his team. The IT Academy is built on the belief that every IT staff member across the University (including technology employees at each school and campus) can grow in her or his area of expertise as well as building strong people and project management skills. Learn more here : https : / / itacademy.harvard.edu /