Hybrid Cyber Security Engineer — Risk & Compliance

The Applied Research Laboratory at Penn State University; Warminster Township (Bucks County); Hybrid; USD 90,000 - 130,000; Full time

Job summary

The Applied Research Laboratory at Penn State University seeks a Cyber Security Engineer to join its Cybersecurity Division in Warminster, PA. This hybrid role supports DoD/Navy/Intel missions by protecting ARL networks and systems through risk assessments, security plan development, and continuous monitoring.

Responsibilities include vulnerability scanning, incident response, DISA STIG administration, and Splunk-based log analysis across VMware/Hyper‑V environments, requiring clear

Qualifications

• Experience auditing systems against regulatory requirements (NIST 800-171/800-53, NISPOM).
• Ability to develop and monitor security plans and compliance artifacts.
• Active security clearance at Top Secret level or higher is required.

Responsibilities

• Aid in development, validation, and submission of security plans and accreditation packages.
• Conduct risk assessments for information systems across environments.
• Complete technical requirements for networks and systems including vulnerability scanning and incident response.
• Administer and harden Windows/Linux systems against DISA STIGs; manage AD accounts/groups.
• Operate virtualization platforms (VMware/Hyper‑V); create VMs and optimize performance.
• Perform basic network administration and monitor health; respond to alerts and root-cause analysis.
• Implement Continuous Monitoring; deploy Splunk forwarders and develop searches and dashboards.

Skills

Technical experience

Regulatory compliance

Security clearance

Analytical skills

Communication skills

Time management

Tools

Splunk

ELK

VMware

Hyper-V

DISA STIG

Job description

The Applied Research Laboratory at Penn State University seeks a Cyber Security Engineer to join its Cybersecurity Division in Warminster, PA. This hybrid role supports DoD/Navy/Intel missions by protecting ARL networks and systems through risk assessments, security plan development, and continuous monitoring.

Responsibilities include vulnerability scanning, incident response, DISA STIG administration, and Splunk-based log analysis across VMware/Hyper‑V environments, requiring clear