Quick Summary
Lead risk assessments and provide recommendations for system, network, and application design, implementation,
Requirements
~1 min read- Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems
- Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
- Meet with stakeholders regularly to assess needs and requirements at a departmental level
- Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
- Monitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for review
- Obtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentation
- Participate in the establishment of program control processes to ensure risk mitigation
- Perform periodic audits of departmental systems under general supervision
- Participate in the implementation of required policies, procedures, and configurations; make recommendations for improvements
- Participate in the preparation of requirements and procedures for forensic preservation
- Research and stay current on industry best practices
Responsibilities
~2 min read- →Lead risk assessments and provide recommendations for system, network, and application design, implementation, and operation of unit-wide systems
- →Lead vulnerability assessments of unit-wide systems and networks to identify deviations from acceptable configurations or policies; conduct assessments of non-standard systems
- →Monitor the corrective actions of unit-wide system audits; develop and manage Plan of Action and Milestones (POAM)
- →Meet with stakeholders regularly to assess needs and requirements at a unit-wide level
- →Obtain certification and accreditation through the creation of process documentation; develop unit or University-wide process documentation
- →Establish program control processes to ensure risk mitigation
- →Perform periodic audits of systems
- →Implement required policies, procedures, and configurations; make recommendations for improvements
- →Develop requirements and procedures for forensic preservation
- →Assist in the development of policy, process, and standards of Cyber Incident Response Team (CIRT) program and participate in CIRT activities as needed
- →Assist in the development and delivery of information security training material
- →May interface with external entities including law enforcement and intelligence/government agencies
- →May provide guidance to lower level Analysts
Required skills/knowledge areas include:
- →Windows and Linux OS
- →CI/CD pipeline
- →Review of hardware and software vulnerabilities
- →DoD Risk Management Framework (RMF)
- →Understand and enforce policies and procedures within classified space
- →Previous success with collaborations in a multi-disciplinary, team-oriented culture Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG)
- →Ability to multitask multiple programs
- →Security+, CAP, GSEC or equivalent
- →Active security clearance, at the Top-Secret level and possession of or eligible for SCI level
Preferred Skills/Knowledge Include:
- →Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
- →Containerized environments
- →Gitlab and Ansible
- →JIRA and Confluence
- →Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)
- →Bachelors' degree in Information Technology, Cybersecurity or related field
Your working location will be in Reston, VA. Questions related to flexible work should be directed to the hiring manager during the interview process. Travel is expected to be at 50% of the time to surrounding areas.
Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.
What We Offer
~1 min read
Salary Structure - Information on Penn State's salary structure
Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page.
Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.
Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.
Location & Eligibility
About this job
- Pay per year
- $82,320–$158,640 a year
- 77% above the $68,120 median for Other jobs on Jobera (125,697 salaries).
- Who can apply
- United States
- Posted
- Today
Listing Details
- First seen
- October 27, 2026
- Last seen
- October 27, 2026
Posting Health
- Days active
- 0
- Repost count
- 0
- Trust Level
- 63%
- Scored at
- October 27, 2026
Signal breakdown
4 other jobs at
View all →Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.