Cyber Information Assurance Analyst

About the role

The Risk Management Department, part of the Applied Research Laboratory (ARL) at Penn State, is seeking a Cyber Information Assurance Analyst to join their team in Reston, VA. The role involves evaluating system and network environments to implement effective cybersecurity programs, determining security controls and policies based on best practices, regulations, and contractual requirements. This position also includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability.

Responsibilities

• Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems
• Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies
• Meet with stakeholders regularly to assess needs and requirements at a departmental level
• Maintain and update documentation of Plan of Action and Milestones (POAM)
• Participate in the establishment of program control processes to ensure risk mitigation
• Perform periodic audits of departmental systems under general supervision
• Implement required policies, procedures, and configurations; make recommendations for improvements
• Prepare requirements and procedures for forensic preservation
• Interface with external entities including law enforcement and intelligence/government agencies
• Provide guidance to lower-level Analysts

Requirements

Required skills/knowledge areas include: Windows and Linux, OSCI/CD pipeline, Review of hardware and software vulnerabilities, DoD Risk Management Framework (RMF), Understanding and enforcing policies and procedures within classified space, Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guide (STIG), Security+, CAP, GSEC or equivalent, Active security clearance, at the Top-Secret level and possession of or eligible for SCI level.

Qualifications

• Bachelor's Degree in Information Technology, Cybersecurity or related field
• Minimum of 1 year of relevant experience or equivalent combination of education and experience

Skills

• Development and maintenance of Security Assessment Plans, Risk Assessment Reports, and POAMs
• Containerized environments, GitLab and Ansible, JIRA and Confluence, Vulnerability scanning tools (ACAS, OpenSCAP, Trivy, Grype, etc.)

Benefits

• Salary range: $68,604.00 - $132,204.00
• Comprehensive medical, dental, and vision coverage
• Robust retirement plans
• Substantial paid time off including holidays, vacation, and sick time
• 75% tuition discount for employees, spouses, and children

Pay

$68,604.00 - $132,204.00

Schedule

Flexible work arrangements are available, with travel expected to be at 50% of the time to surrounding areas.

Benefits

• Comprehensive medical, dental, and vision coverage
• Robust retirement plans
• Substantial paid time off including holidays, vacation, and sick time
• 75% tuition discount for employees, spouses, and children

Contact Information

For further information on ARL, visit our web site at www.arl.psu.edu. Questions related to flexible work should be directed to the hiring manager during the interview process.