Cyber Information Assurance & Risk Analyst

The Applied Research Laboratory at Penn State University; University Park (TX); On-site; USD 69,000 - 132,000; Full time

Benefits offered by this job

Tuition discount

Job summary

The Applied Research Laboratory at Penn State University in State College, PA is seeking a Cyber Information Assurance Analyst to join the Risk Management Department. The role focuses on risk assessments, vulnerability management, and securing DoD-aligned information systems in a challenging research environment.

Responsibilities include coordinating with stakeholders, supporting certification and accreditation, and contributing to policy and process improvements while staying current with

Qualifications

• Bachelor's degree required; 1+ years of relevant experience or equivalent combination.
• Certifications not required but Security+ or equivalent is preferred.

Responsibilities

• Conduct risk assessments for system, network, and application design, implementation and operation.
• Perform vulnerability assessments to identify deviations from configurations or policies.
• Meet with stakeholders regularly to assess needs and requirements.
• Monitor audits and draft POAM documentation for review.
• Assist with certification and accreditation through process documentation.

Skills

Windows and Linux OS

CI/CD pipeline

Vulnerability review

DoD RMF

RMF compliance

ACAS/STIG

multitask

Security+ / CAP / GSEC

Top-Secret / SCI eligibility

Education

Bachelor's degree in IT, Cybersecurity or related field

Tools

ACAS

OpenSCAP

Trivy

Grype

Gitlab

Ansible

JIRA

Confluence

Job description

The Applied Research Laboratory at Penn State University in State College, PA is seeking a Cyber Information Assurance Analyst to join the Risk Management Department. The role focuses on risk assessments, vulnerability management, and securing DoD-aligned information systems in a challenging research environment.

Responsibilities include coordinating with stakeholders, supporting certification and accreditation, and contributing to policy and process improvements while staying current with