APPLICATION INSTRUCTIONS:
Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.
JOB DESCRIPTION AND POSITION REQUIREMENTS
We are searching for a Part-time Cyber Information Assurance Analyst to join the Risk Management Department, in Reston, VA, in the Applied Research Laboratory (ARL) at Penn State. The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability. CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities.
ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply
You will:
- Conduct risk assessments of information systems and provide actionable recommendations across system, network, application, design, and implementation
- Perform vulnerability assessments on systems and networks to identify deviations from security baselines, configurations, and organizational policies
- Execute periodic audits of information systems to monitor user activity, ensure compliance, and identify potential risks
- Develop, document, and maintain Plans of Action and Milestones (POA&Ms) to track and remediate identified vulnerabilities
- Review and evaluate security policies, procedures, and system configurations; recommend improvements to strengthen security posture
- Continuously test and evaluate security processes, identifying weaknesses and driving process improvement
- Research emerging threats, tools, and industry best practices to ensure up-to-date cybersecurity strategies
Minimally requires 4 years' related experience and currently pursuing a Bachelor's degree in Cybersecurity and Information Assurance.
Required skills/knowledge areas include:
- Windows and Linux OS
- CI/CD pipeline
- Review of hardware and software vulnerabilities
- Understanding of the Risk Management Framework (RMF)
- Understand and enforce policies and procedures within classified space
- Ability to multitask multiple programs
- Security+, CAP, GSEC or equivalent
- Active Secret or Top Secret
Preferred Skills/Knowledge Include:
- Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
- Containerized environments
- Gitlab and Ansible
- Atlassian Suite
- Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)
- Bachelors' degree in Information Technology, Cybersecurity or related field
Your working location will be in Reston, VA. Questions related to flexible work should be directed to the hiring manager during the interview process. Travel is expected to be at 50% of the time to surrounding areas.
ARL's purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC).
BACKGROUND CHECKS/CLEARANCESEmployment with the University will require successful completion of background check(s) in accordance with University policies.
All positions at ARL require candidates to possess the ability to obtain a government security clearance; you will be notified during the interview process if this position is subject to a government background investigation. You must be a U.S. citizen to apply. Employment with the ARL will require successful completion of a pre-employment drug screen.
CAMPUS SECURITY CRIME STATISTICS
Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review
here.
EEO IS THE LAW
Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.