Cyber Defense & SIEM Engineer

Penn State University; United States; Remote; USD 72,000 - 108,000; Full time

Benefits offered by this job

75% tuition discount

Comprehensive benefits package

Job summary

Penn State University is seeking a Cyber Security Systems Engineer within the Penn State IT Information Security team to design, implement, secure, monitor, and maintain information systems and security infrastructure across networks, endpoints, servers, cloud, and applications.

The role collaborates with infrastructure, networking, cloud, and compliance teams to strengthen security posture, while focusing on monitoring, incident response, and ongoing security operations.

Qualifications

• Bachelor’s Degree in information security, risk management, information technology, cybersecurity, or related field.
• 1+ years of relevant experience; or an equivalent combination of education and experience.
• No required certifications specified in the posting.

Responsibilities

• Review, investigate, and respond to complex alerts and threat activity related to compromised devices and Tier 1 escalations.
• Correlate data across endpoints, networks, and logs to scope an attack.
• Create dashboards, saved searches, and other SIEM content for compromised device activity.
• Design, evaluate, implement, and maintain detection and prevention methods against current threats to reduce false positives.
• Investigate IOCs from various agencies to ensure they are not present in the environment.
• Assist with forensic preservation of digital evidence.
• Maintain security documentation and update it as needed.
• Assess and monitor effectiveness of security controls.
• Keep up to date on cybersecurity trends and best practices.

Skills

Threat detection

Incident response

SIEM

IOCs investigation

EDR

Security monitoring

Education

Bachelor’s Degree

Tools

SIEM tools

EDR

Job description

Penn State University is seeking a Cyber Security Systems Engineer within the Penn State IT Information Security team to design, implement, secure, monitor, and maintain information systems and security infrastructure across networks, endpoints, servers, cloud, and applications.

The role collaborates with infrastructure, networking, cloud, and compliance teams to strengthen security posture, while focusing on monitoring, incident response, and ongoing security operations.