Cyber Security Manager

Cyber StrategiX; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Applied Research Laboratory at Penn State in Reston, VA, is seeking an experienced Cybersecurity Engineering Manager to lead a team responsible for secure IT and cybersecurity in classified environments. This on-site role includes periodic travel to remote locations.

You will mentor staff, manage security plans, risk assessments, and ensure compliance with RMF, NIST/ISO 800-53, and DoD directives. Strong leadership and policy development are required.

Qualifications

• Experience with RMF assessment and authorization of systems and networks.
• Strong knowledge of NIST/ISO standards and DoD directives.
• Technical background in Windows and Linux environments.
• Leadership experience in IT security and policy development.
• Ability to obtain and maintain Security+ or CISSP certification.
• Eligibility for TS/SCI with CI polygraph.

Responsibilities

• Lead and mentor IT security professionals, including hiring and performance management.
• Develop and maintain RMF security plans and authorization packages.
• Oversee secure design, configuration, and system support with proper controls.
• Oversee risk assessments across the system lifecycle.
• Monitor networks and systems for compliance with cybersecurity policies.
• Create training material to support audits and security expectations.
• Lead vulnerability scanning, log review, and incident response.
• Collaborate with ARL leadership to integrate cybersecurity requirements.

Skills

RMF assessment

NIST/ISO 800-53

DoD directives & DISA STIG

Windows & Linux

Security policy development

Team leadership

Security+ or CISSP

Communication & collaboration

TS/SCI with CI polygraph

Education

Bachelor's degree in Information Security/IT/CS

Tools

Nessus

SCAP Compliance Checker

Splunk

VMware

Job description

Your working location will be fully on-site located in Reston, VA. This role requires periodic travel to remote locations.

We are searching for an experienced Cybersecurity Engineering Manager to oversee team operations for the SPS Cyber/ITS team in the Information Technology Services Division of the Applied Research Laboratory at Penn State. This role will focus on and oversee the Special Programs spaces from the information technology, cybersecurity, and compliance perspective. You will lead a team responsible for secure system design, support, compliance, documentation, and continuous monitoring within classified and sensitive research environments.

You will:

• Lead and mentor a team of information technology, information security, and cybersecurity professionals, to include hiring, workforce development, performance management, and succession planning
• Develop, validate, submit, and maintain information system security plans, certification and authorization packages, security documentation, and plans of action and milestones in support of compliance requirements
• Oversee design, configuration, security, and systems support, ensuring security controls are properly implemented and maintained
• Oversee development and implementation of risk assessments against the information system lifecycle
• Monitor and assist in the assessment of existing and emerging systems and networks to ensure alignment with current cybersecurity policies, concepts, and security measures
• Promote cybersecurity awareness by developing training material related to compliance and audit requirements to support employees with audits and security expectations
• Provide technical leadership in vulnerability scanning, review of security/event log review, network analysis, and incident response to support secure operations
• Collaborate with operational and research leadership to ensure cybersecurity requirements are integrated throughout ARL processes

Required skills/experience areas include:

• Assessment and authorization of systems and networks using RMF
• NIST/ISO standards (e.g. 800-53), Department of Defense directives, DISA STIG, and regulatory requirements
• Strong technical background with significant experience using multiple operating systems, such as Windows and Linux
• Policy, procedure, plan of action and milestone, risk assessment, and security plan development with experience monitoring for compliance
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures
• Management or leadership experience in the information technology and security space
• The ability to certify and maintain information security related certifications (eg. Security+ and CISSP)
• Success in an office environment, where various forms of communication and organizational skills were crucial to be effective
• Success working both independently and collaboratively in a multi-disciplinary, team-oriented culture
• Current eligibility for access to classified information at the Top Secret/Sensitive Compartmented Information (TS/SCI) level with minimum of CI polygraph

Preferred skills/experience areas include:

• A Bachelor's degree in Information Security, Information Technology, or Computer Science
• Vulnerability scanning and mitigation utilizing Nessus, SCAP Compliance Checker, or a similar tool
• Networking fundamentals, including various concepts, tools, and administrative functions
• SEIM management or use for analysis, such as Splunk
• VMWare and management of Virtual Machines
• Training material development