Cyber Security Engineer

The Applied Research Laboratory (ARL) at Penn State seeks a Cyber Security Engineer to help secure research data and systems through proactive protections, risk assessment and action, and compliance support for work supporting the Navy, the DoD, and the Intel Community. The role is hybrid, with on-site work in Warminster, PA and work from home as scheduled.

Location and Work Style

Warminster, PA (hybrid)

• Your working arrangement includes a hybrid mix of on-site and work from home.
• On-site location is Warminster, PA.
• Approval of remote and hybrid work is not guaranteed, regardless of work location.
• Questions related to flexible work should be directed to the hiring manager during the interview process.

Salary Range

The salary range for this position, including all possible grades, is USD 92,100 - 174,708 per yearly.

Salary structure information is available through Penn State’s salary structure documentation.

Responsibilities

• Support the development, validation, and submission of information system security plans, security test and evaluation plans, certification and accreditation or authorization packages, and plans of action and milestones to meet compliance requirements.
• Participate in conducting, developing, planning, and coordinating risk assessments for information systems in development, test, production, and research environments, based on established or newly determined compliance and audit requirements.
• Complete technical requirements for networks and systems, including vulnerability scanning, review of security and event logs, network analysis, security configuration review, and incident response on an as-needed basis.
• Administer and harden DISA STIG Windows/Linux systems across physical and virtual environments, including provisioning, patching, baselining, and managing AD accounts and groups.
• Operate and maintain virtualization platforms such as VMware and Hyper-V, including creating VMs, templates, and snapshots, monitoring resources, and optimizing performance.
• Perform basic network administration (ports, VLANs, and port security), monitor system and network health, respond to alerts, conduct root-cause analysis, and remediate issues.
• Support Continuous Monitoring by deploying Splunk universal forwarders, ensuring log ingestion health, and developing searches, alerts, and dashboards for operations and cyber use.

Required Education and Experience

• Education: Bachelor’s Degree
• Minimum experience listed: 1 years

Role Level Requirements

The position may be filled as one of the following levels:

• Cyber Security Engineer (ARL) - Advanced Professional: Bachelor’s Degree and 3+ years of relevant experience, or an equivalent combination of education and experience accepted.
• Cyber Security Engineer (ARL) - Intermediate Professional: Bachelor’s Degree and 1+ years of relevant experience, or an equivalent combination of education and experience accepted.

Requirements

• Strong practical technical experience across multiple operating systems and technology types, including the ability to audit systems against compliance requirements.
• Knowledge and application of NIST 800-171, NIST 800-53, NISPOM, DAAG, and other regulatory requirements.
• Experience supporting security plan development and/or continuous monitoring aligned to security plans for compliance.
• Strong system and network administration skills.
• Active security clearance at the Top Secret level or higher.
• Effective analytical, problem-solving, and communication skills.
• Strong organizational, multitasking, and time management abilities, with the ability to work independently and collaboratively across teams and disciplines.
• U.S. citizen to apply.
• Employment with the University requires successful completion of background check(s) in accordance with University policies.
• Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors.

Technologies

• DISA STIG, Windows, Linux
• VMware, Hyper-V
• VMs, templates, snapshots
• AD accounts/groups
• Splunk universal forwarders, Splunk, ELK
• NIST 800-171, NIST 800-53
• NISPOM, DAAG
• CUI

Benefits

• Comprehensive medical, dental, and vision coverage
• Robust retirement plans
• Substantial paid time off including holidays, vacation, and sick time
• 75% tuition discount, available to employees as well as eligible spouses and children

Required Certifications

No required certifications are listed.

Background Checks and Clearances

• Employment with the University requires successful completion of background check(s) in accordance with University policies.

Notice: Applied Research Laboratory (ARL) Employment

• ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information.
• Personal electronic devices brought onsite must be registered and may be restricted from certain areas.

Campus Security and Annual Security Report

Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies regarding campus security topics such as alcohol and drug use, crime prevention, reporting of crimes, sexual assault, and other matters. The ASR is available for review here.