Cybersecurity Systems Engineer

Success in this role requires a strong understanding of operating systems, networks, applications, databases, cloud services, virtualization, and automation, along with meticulous investigative, analytical, documentation, and problem-solving skills.

The ideal candidate will have hands-on cybersecurity experience and be prepared to quickly step into the role, independently apply their technical knowledge, and contribute to ongoing security operations and initiatives.

• Degree in Information Security, Risk Management, Information Technology, Cybersecurity, or related field or discipline
• Experience evaluating, implementing, and maintaining cybersecurity detection and prevention methodologies to address evolving threats and reduce false positives
• Experience developing and maintaining SIEM content, including dashboards, saved searches, queries, and alerts related to compromised devices and suspicious activity
• Experience investigating Indicators of Compromise (IOCs) from internal and external sources to identify potential threats within an organization’s environment
• Experience investigating and responding to complex security alerts and threat activity
• Experience with security monitoring, incident response, threat detection, and analysis using SIEM, EDR, or other cybersecurity tools

Primary Job Duties:

• →Review, investigate, and respond to complex alerts and threat activity related to compromised devices as well as alerts escalated from Tier 1
• →Correlate data across endpoints, networks, and logs to scope an attack
• →Create dashboards, saved searches, and other SIEM content related to compromised device activity
• →Design, evaluate, implement, and maintain detection and prevention methodologies in response to current threats and minimize false positives to improve alert fidelity
• →Investigate received Indicators of Compromise (IOCs) from various agencies to ensure they are not present in the environment

Additional Job Duties:

• →Assist with the forensic preservation of digital evidence, including hard drives
• →Maintain accurate security documentation and update it as needed
• →Assess and monitor the effectiveness of security controls
• →Keep up to date on cybersecurity trends and industry best practices
• →Assist in developing and revising organizational security policies, standards, processes, and guidelines
   

PREFERRED CERTIFICATIONS

These certifications are preferred but not required:

• CISSP
• CISM
• CompTIA Sec+
• CompTIA CySA+

Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here.

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.

Federal Contractors Labor Law Poster

PA State Labor Law Poster

Penn State Policies

Copyright Information

Hotlines