Cyber Security Engineer

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections with real content. We must parse the posting. Job title: Cyber Security Engineer (not to repeat as heading). We need sections. We need to extract: - About the role: description of mission, role purpose. The posting includes: "We are searching for a Cyber Security Engineer to join the Cybersecurity Division at the Applied Research Laboratory (ARL) at Penn State. Our mission is to support and secure the data and systems relevant to the challenging scientific, engineering, and technology problems conducted by our research teams in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC). This role helps to protect ARL’s network and systems by providing proactive security measures, assessing and acting on risks, and ensuring compliance. ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply." That's about the role. - Responsibilities: bullet list of duties: "You will:" then list items. List items: - Aid in the development, validation, and submission of information system security plans, security test and evaluation plans, certification and accreditation or authorization packages, and plans of action and milestones in support of compliance requirements - Take part in conducting, developing, planning, and coordinating risk assessments of information systems in development, test, production and research environments as required by established or newly determined compliance/audit requirements - Complete technical requirements for networks and systems such as; vulnerability scanning, review of security/event logs, network analysis, security configuration review, and incident response on an as-needed basis - Administer and harden against DISA STIG Windows/Linux systems across physical and virtual environments; provision, patch, baseline, and manage AD accounts/groups - Operate and maintain virtualization platforms (e.g., VMware/Hyper‑V): create VMs/templates/snapshots, monitor resources, and optimize performance - Basic network administration (ports/VLANs/port security); monitor system/network health, respond to alerts, perform root‑cause analysis, and remediate - Continuous Monitoring; deploy Splunk universal forwarders, ensure log ingestion health and develop searches, alerts, and dashboards for ops/cyber use - Requirements: maybe "Required Skills/Experience areas include:" list. - Preferred Skills/Experience areas include: list. - Minimum Education, Work Experience & Required Certifications: includes two levels: Advanced Professional and Intermediate Professional. - Benefits: described: "Salary & Benefits" includes salary range and benefits description. - Pay: salary range. - Schedule: hybrid work location: "Your working location will be a hybrid of on-site/work from home, on-site location is Warminster, PA." Also mention remote/hybrid approval not guaranteed. Thus we have schedule info. We need to avoid boilerplate: application instructions, EEO, etc. We need to preserve all substantive info. We must not repeat job title as heading. We must not include Job ID etc. We must not create sections with placeholder text. We need to output only HTML fragment. Let's structure:

About the role

...

Responsibilities

• ...
...

Required Skills/Experience

maybe "Requirements". The instruction says use headings like Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can combine required skills under "Requirements" or "Skills". Probably "Requirements" for required skills/experience, and "Preferred Skills" could be under "Skills" or maybe separate "Preferred Skills". But we have to follow instruction: use headings for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can have sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide what goes where. - Requirements: maybe the minimum education, work experience, required certifications. - Qualifications: maybe the required skills/experience (strong practical technical experience etc.)? Or we could put required skills under Requirements and qualifications under Qualifications (like education). But we have both education and experience under "Minimum Education, Work Experience & Required Certifications". That could be Qualifications. - Skills: could be both required and preferred skills. Simplify: Use Requirements for required skills/experience, Qualifications for education/experience/certifications, Skills for preferred skills? Or combine. Better: Use Requirements for required skills/experience (the list after "Required Skills/Experience areas include:"). Use Qualifications for education, experience, certifications (the Minimum Education... section). Use Skills for preferred skills/experience list. Benefits: benefits description. Pay: salary range. Schedule: hybrid work details. Let's extract content. About the role paragraph: combine sentences. Responsibilities: list as above. Required Skills/Experience areas include: list: - Strong practical technical experience with multiple operating systems and types of technologies and the ability to audit them against compliance requirements - Knowledge and application of NIST 800-171, NIST 800-53, NISPOM, DAAG, and other regulatory requirements - Security plan development and/or continuous monitoring for compliance with security plans - Strong system and network administration skills - Active security clearance, at the Top Secret level or higher - Effective analytical, problem solving, and communication skills - Efficient organizational, multitasking, and time management abilities with the aptitude to work independently, as part of a team, and across multiple teams in various disciplines Preferred Skills/Experience areas include: - Experience certifying and accrediting systems and networks - UNIX/Linux operating system administration - TCP/IP network analysis and network/packet level examination tools - Experience with vulnerability management tools and best practice - SEIM management or use for analysis, such as Splunk or ELK - VMWare and management of Virtual Machines Minimum Education, Work Experience & Required Certifications: Two levels: If filled as Cyber Security Engineer (ARL) - Advanced Professional, this position requires: Bachelor's Degree 3+ years of relevant experience; or an equivalent combination of education and experience accepted. Required Certifications: None If filled as Cyber Security Engineer (ARL) - Intermediate Professional, this position requires: Bachelor's Degree 1+ years of relevant experience; or an equivalent combination of education and experience accepted. Required Certifications: None We can phrase as: For Advanced Professional: Bachelor's degree and 3+ years relevant experience (or equivalent). For Intermediate Professional: Bachelor's degree and 1+ years relevant experience (or equivalent). No required certifications. Benefits: description: "Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children." Also mention salary range. Pay: "The salary range for this position, including all possible grades, is $92,100.00 - $174,708.00." Schedule: "Your working location will be a hybrid of on-site/work from home, on-site location is Warminster, PA. Approval of remote and hybrid work is not guaranteed regardless of work location." We might also include note about remote work info link but that's maybe boilerplate; we can keep the statement. Now produce HTML. We must not include any markdown fences. Let's craft. Check for any repeated content: ensure we didn't include application instructions, EEO, etc. We'll output:

About the role

We are searching for a Cyber Security Engineer to join the Cybersecurity Division at the Applied Research Laboratory (ARL) at Penn State. Our mission is to support and secure the data and systems relevant to the challenging scientific, engineering, and technology problems conducted by our research teams in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC). This role helps to protect ARL’s network and systems by providing proactive security measures, assessing and acting on risks, and ensuring compliance. ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

Responsibilities

• Aid in the development, validation, and submission of information system security plans, security test and evaluation plans, certification and accreditation or authorization packages, and plans of action and milestones in support of compliance requirements
• Take part in conducting, developing, planning, and coordinating risk assessments of information systems in development, test, production and research environments as required by established or newly determined compliance/audit requirements
• Complete technical requirements for networks and systems such as vulnerability scanning, review of security/event logs, network analysis, security configuration review, and incident response on an as-needed basis
• Administer and harden against DISA STIG Windows/Linux systems across physical and virtual environments; provision, patch, baseline, and manage AD accounts/groups
• Operate and maintain virtualization platforms (e.g., VMware/Hyper‑V): create VMs/templates/snapshots, monitor resources, and optimize performance
• Basic network administration (ports/VLANs/port security); monitor system/network health, respond to alerts, perform root‑cause analysis, and remediate
• Continuous Monitoring; deploy Splunk universal forwarders, ensure log ingestion health and develop searches, alerts, and dashboards for ops/cyber use

Requirements

• Strong practical technical experience with multiple operating systems and types of technologies and the ability to audit them against compliance requirements
• Knowledge and application of NIST 800-171, NIST 800-53, NISPOM, DAAG, and other regulatory requirements
• Security plan development and/or continuous monitoring for compliance with security plans
• Strong system and network administration skills
• Active security clearance, at the Top Secret level or higher
• Effective analytical, problem solving, and communication skills
• Efficient organizational, multitasking, and time management abilities with the aptitude to work independently, as part of a team, and across multiple teams in various disciplines

Qualifications

For the Advanced Professional level: Bachelor's degree and 3+ years of relevant experience (or an equivalent combination). For the Intermediate Professional level: Bachelor's degree and 1+ years of relevant experience (or an equivalent combination). No required certifications.

Skills

• Experience certifying and accrediting systems and networks
• UNIX/Linux operating system administration
• TCP/IP network analysis and network/packet level examination tools
• Experience with vulnerability management tools and best practice
• SEIM management or use for analysis, such as Splunk or ELK
• VMWare and management of Virtual Machines

Benefits

Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children.

Pay

The salary range for this position, including all possible grades, is $92,100.00 - $174,708.00.

Schedule

Your working location will be a hybrid of on-site/work from home, with the on