Cyber Information Assurance AnalystWe are searching for a Cyber Information Assurance Analyst to join the Risk Management Department, in Reston, VA, in the Applied Research Laboratory (ARL) at Penn State. The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability.
CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities.ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.You will:Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systemsConduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policiesMeet with stakeholders regularly to assess needs and requirements at a departmental levelMonitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for reviewObtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentationParticipate in the establishment of program control processes to ensure risk mitigationPerform periodic audits of departmental systems under general supervisionParticipate in the implementation of required policies, procedures, and configurations; make recommendations for improvementsParticipate in the preparation of requirements and procedures for forensic preservationResearch and stay current on industry best practicesAdditional responsibilities for higher level position includes:Lead risk assessments and provide recommendations for system, network, and application design, implementation, and operation of unit-wide systemsLead vulnerability assessments of unit-wide systems and networks to identify deviations from acceptable configurations or policies; conduct assessments of non-standard systemsMonitor the corrective actions of unit-wide system audits; develop and manage Plan of Action and Milestones (POAM)Meet with stakeholders regularly to assess needs and requirements at a unit-wide levelObtain certification and accreditation through the creation of process documentation; develop unit or University-wide process documentationEstablish program control processes to ensure risk mitigationPerform periodic audits of systemsImplement required policies, procedures, and configurations; make recommendations for improvementsDevelop requirements and procedures for forensic preservationAssist in the development of policy, process, and standards of Cyber Incident Response Team (CIRT) program and participate in CIRT activities as neededAssist in the development and delivery of information security training materialMay interface with external entities including law enforcement and intelligence/government agenciesMay provide guidance to lower level AnalystsRequired skills/knowledge areas include:Windows and Linux OSCI/CD pipelineReview of hardware and software vulnerabilitiesDoD Risk Management Framework (RMF)Understand and enforce policies and procedures within classified spacePrevious success with collaborations in a multi-disciplinary, team-oriented culture Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG)Ability to multitask multiple programsSecurity+, CAP, GSEC or equivalentActive security clearance, at the Top-Secret level and possession of or eligible for SCI levelPreferred Skills/Knowledge Include:Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMsContainerized environmentsGitlab and AnsibleJIRA and ConfluenceVulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)Bachelors' degree in Information Technology, Cybersecurity or related fieldYour working location will be in Reston, VA. Questions related to flexible work should be directed to the hiring manager during the interview process. Travel is expected to be at 50% of the time to surrounding areas.Minimum Education, Work Experience & Required CertificationsIf filled as Cyber Security Information Analyst (ARL) - Intermediate Professional, this position requires:Bachelor's Degree1+ years of relevant experience; or an equivalent combination of education and experience acceptedRequired Certifications: NoneIf filled as Cyber Security Information Analyst (ARL) - Professional, this position requires:Bachelor's DegreeNo prior relevant work experience required; previous relevant work experience accepted in lieu of education.Required Certifications: NoneARL's purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC).
FOR FURTHER INFORMATION on ARL, visit our web site at Range for this position, including all possible grades, is $68,604.00 - $132,204.00.Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.
For more detailed information, please visit our Benefits Page.