Cyber Information Assurance Analyst

The Applied Research Laboratory at Penn State University; Reston (VA); On-site; USD 56,200 - 102,300; Full time

Benefits offered by this job

75% tuition discount

Comprehensive medical, dental, and vision coverage

Robust retirement plans

Substantial paid time off

Job summary

A leading research laboratory is seeking a Cyber Information Assurance Analyst in Reston, VA. This role involves conducting risk assessments, managing compliance, and implementing effective cybersecurity practices. The ideal candidate will possess a Bachelor's degree in Information Technology or Cybersecurity and have experience with Windows, Linux, and DoD Risk Management Framework. Security clearance at Top-Secret level is required. The position offers a salary range of $56,200 – $102,300 and attractive benefits including a 75% tuition discount.

Qualifications

• Bachelor's degree and 1+ year of relevant experience, or equivalent.
• Security certifications like Security+, CAP, GSEC or equivalent are advantageous.
• Active security clearance at Top-Secret level required.

Responsibilities

• Conduct risk and vulnerability assessments of systems and networks.
• Develop recommendations for system designs and security policies.
• Monitor audits and ensure compliance with security standards.

Skills

Windows and Linux OS

CI/CD pipeline

Review of hardware and software vulnerabilities

DoD Risk Management Framework (RMF)

Understand and enforce policies and procedures within classified space

Previous success with collaborations in a multi-disciplined team-oriented culture

Security+

Active security clearance at the Top-Secret level

Education

Bachelor's degree in Information Technology or Cybersecurity

Tools

Gitlab

Ansible

JIRA

Confluence

Vulnerability scanning tools (ACAS, OpenSCAP, etc.)

Job description

Application Instructions

CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.

Position

Cyber Information Assurance Analyst to join the Risk Management Department, in Reston, VA, at the Applied Research Laboratory (ARL) at Penn State. The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability. CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities.

Responsibilities

Intermediate Professional Responsibilities

• Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems.
• Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies.
• Meet with stakeholders regularly to assess needs and requirements at a departmental level.
• Monitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for review.
• Obtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentation.
• Participate in the establishment of program control processes to ensure risk mitigation.
• Perform periodic audits of departmental systems under general supervision.
• Participate in the implementation of required policies, procedures, and configurations; make recommendations for improvements.
• Participate in the preparation of requirements and procedures for forensic preservation.
• Research and stay current on industry best practices.

Advanced Professional Responsibilities

• Lead risk assessments and provide recommendations for system, network, and application design, implementation, and operation of unit-wide systems.
• Lead vulnerability assessments of unit-wide systems and networks to identify deviations from acceptable configurations or policies; conduct assessments of non-standard systems.
• Monitor the corrective actions of unit-wide system audits; develop and manage Plan of Action and Milestones (POAM).
• Meet with stakeholders regularly to assess needs and requirements at a unit-wide level.
• Obtain certification and accreditation through the creation of process documentation; develop unit or University-wide process documentation.
• Establish program control processes to ensure risk mitigation.
• Perform periodic audits of systems.
• Implement required policies, procedures, and configurations; make recommendations for improvements.
• Develop requirements and procedures for forensic preservation.
• Assist in the development of policy, process, and standards of Cyber Incident Response Team (CIRT) program and participate in CIRT activities as needed.
• Assist in the development and delivery of information security training material.
• May interface with external entities including law enforcement and intelligence/government agencies.
• May provide guidance to lower level Analysts.

Required Skills / Knowledge Areas

• Windows and Linux OS
• CI/CD pipeline
• Review of hardware and software vulnerabilities
• DoD Risk Management Framework (RMF)
• Understand and enforce policies and procedures within classified space
• Previous success with collaborations in a multi‑disciplinary, team‑oriented culture, Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG)
• Ability to multitask multiple programs
• Security+, CAP, GSEC or equivalent
• Active security clearance, at the Top‑Secret level and possession of or eligible for SCI level

Preferred Skills / Knowledge

• Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
• Containerized environments
• Gitlab and Ansible
• JIRA and Confluence
• Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)
• Bachelor's degree in Information Technology, Cybersecurity or related field

Location & Travel

Your working location will be in Reston, VA. Questions related to flexible work should be directed to the hiring manager during the interview process. Travel is expected to be at 50% of the time to surrounding areas.

Minimum Education, Experience & Required Certifications

For Cyber Information Assurance Analyst – Intermediate Professional: Bachelor’s Degree and 1+ year of relevant experience (or equivalent). No required certifications. For Cyber Information Assurance Analyst – Professional: Bachelor’s Degree with no prior relevant work experience required; prior experience accepted in lieu of education. No required certifications.

Background Checks / Clearances

Employment with the University will require successful completion of background check(s) in accordance with University policies. All positions at ARL require candidates to possess the ability to obtain a government security clearance; you will be notified during the interview process if this position is subject to a government background investigation. You must be a U.S. citizen to apply. Employment with the ARL will require successful completion of a pre‑employment drug screen.

Salary & Benefits

The salary range for this position, including all possible grades, is $56,200.00 – $102,300.00. THE PROPOSED SALARY RANGE MAY BE IMPACTED BY GEOGRAPHIC DIFFERENTIAL

Penn State provides a competitive benefits package for full‑time employees designed to support both personal and professional well‑being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off including holidays, vacation, and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.

EEO Statement

Penn State is an equal‑opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814‑865‑1473.