Cyber Information Assurance Analyst

The Pennsylvania State University; United States; Vor Ort; USD 82.000 - 159.000; Vollzeit

Zusammenfassung

The Pennsylvania State University is seeking a Cyber Information Assurance Analyst to join the Risk Management Department at ARL in Reston, VA. The role focuses on risk assessments, vulnerability management, and compliance with DoD requirements to support national security research initiatives.

As part of a DoD SkillBridge partner, the position offers engagement with cross-functional teams, audit preparation, and ongoing information security training materials development.

Qualifikationen

• Bachelor's degree or higher with 1+ years of relevant experience.
• Experience with risk management frameworks and information assurance.
• Familiarity with DoD security requirements and standards.

Aufgaben

• Conduct risk assessments of departmental systems and networks and provide design/operation recommendations.
• Perform vulnerability assessments and identify deviations from policies.
• Meet with stakeholders to assess needs at departmental level.
• Draft POAMs for system audits and certification activities.
• Assist with documentation for processes and accreditation.

Kenntnisse

Security clearance

RMF

Policy enforcement

Multitasking

Team collaboration

Ausbildung

Bachelor's Degree

Tools

ACAS

STIG

GitLab

Ansible

JIRA

Confluence

Trivy

Grype

Jobbeschreibung

Position Specifications

We are searching for a Cyber Information Assurance Analyst to join the Risk Management Department, in Reston, VA, in the Applied Research Laboratory (ARL) at Penn State.

The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability. CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities. ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

Responsibilities

• Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems
• Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
• Meet with stakeholders regularly to assess needs and requirements at a departmental level
• Monitor the corrective actions of departmental system audits; draft documentation of Plan of Action and Milestones (POAM) for review
• Obtain certification and accreditation for departmental systems through the creation of process documentation support; may assist with unit or University wide process documentation
• Participate in the establishment of program control processes to ensure risk mitigation
• Perform periodic audits of departmental systems under general supervision
• Participate in the implementation of required policies, procedures, and configurations; make recommendations for improvements
• Participate in the preparation of requirements and procedures for forensic preservation
• Research and stay current on industry best practices

Additional Responsibilities for Higher Level Position

• Lead risk assessments and provide recommendations for system, network, and application design, implementation, and operation of unit-wide systems
• Lead vulnerability assessments of unit-wide systems and networks to identify deviations from acceptable configurations or policies; conduct assessments of non-standard systems
• Monitor the corrective actions of unit-wide system audits; develop and manage Plan of Action and Milestones (POAM)
• Meet with stakeholders regularly to assess needs and requirements at a unit-wide level
• Obtain certification and accreditation through the creation of process documentation; develop unit or University-wide process documentation
• Establish program control processes to ensure risk mitigation
• Perform periodic audits of systems
• Implement required policies, procedures, and configurations; make recommendations for improvements
• Develop requirements and procedures for forensic preservation
• Assist in the development and delivery of information security training material
• May interface with external entities including law enforcement and intelligence/government agencies
• May provide guidance to lower level Analysts

Required Skills / Knowledge Areas

• Windows and Linux OS
• CI/CD pipeline Review of hardware and software vulnerabilities
• DoD Risk Management Framework (RMF)
• Understand and enforce policies and procedures within classified space
• Previous success with collaborations in a multi-disciplinary, team-oriented culture
• Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG)
• Ability to multitask multiple programs
• Security+, CAP, GSEC or equivalent
• Active security clearance, at the Top-Secret level and possession of or eligible for SCI level

Preferred Skills / Knowledge

• Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
• Containerized environments
• Gitlab and Ansible
• JIRA and Confluence
• Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)

Minimum Education, Work Experience & Required Certifications

If filled as Cyber Security Information Analyst (ARL) - Intermediate Professional, this position requires:

Bachelor's Degree 1+ years of relevant experience; or an equivalent combination of education and experience accepted

Required Certifications: None

If filled as Cyber Security Information Analyst (ARL) - Professional, this position requires:

Bachelor's Degree No prior relevant work experience required; previous relevant work experience accepted in lieu of education.

Required Certifications: None

Background Checks / Clearances

Employment with the University will require successful completion of background check(s) in accordance with University policies.

Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply.

Salary & Benefits

The salary range for this position, including all possible grades, is $82,320.00 - $158,640.00.

• Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being.
• In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time.
• One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.

EEO is the Law

Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.

If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473.

Company Culture

Our ideals stem from our origins as Pennsylvania’s sole land-grant institution, which allow us to continue to bring positive impact to humanity through our teaching, research, and engagement mission. And across the world is a community of Penn Staters – more than half a million strong – driven by that same spirit to serve our local and global communities. At Penn State, passion is met with collaboration in an environment that is rooted in shared pride for the accomplishments of our fellow students, faculty, staff, and alumni. Penn Staters cheer each other on to build a culture committed to service and engagement. Our University values represent our core ethical aspirations for all our daily activities and actions as students, faculty, staff, and volunteers at Penn State. Our values are as follows; Integrity, Respect, Responsibility, Discovery, Excellence, and Community. We Are Penn State. One Community. Impacting Many.

Travel is expected to be at 50% of the time to surrounding areas.