Cybersecurity Engineering Manager

Position Overview

The role is fully on‑site in Reston, VA, with periodic travel to remote locations. It is a Cybersecurity Engineering Manager position overseeing the SPS Cyber/ITS team within the Information Technology Services Division of the Applied Research Laboratory (ARL) at Penn State. The manager will lead a team responsible for secure system design, support, compliance, documentation, and continuous monitoring in classified and sensitive research environments.

Responsibilities

• Lead and mentor a team of information technology, information security, and cybersecurity professionals, including hiring, workforce development, performance management, and succession planning.
• Develop, validate, submit, and maintain information system security plans, certification and authorization packages, security documentation, and plans of action and milestones to support compliance requirements.
• Oversee design, configuration, security, and systems support, ensuring security controls are properly implemented and maintained.
• Oversee development and implementation of risk assessments throughout the information system lifecycle.
• Monitor and assist in the assessment of existing and emerging systems and networks to ensure alignment with current cybersecurity policies, concepts, and security measures.
• Promote cybersecurity awareness by developing training material related to compliance and audit requirements.
• Provide technical leadership in vulnerability scanning, security/event log review, network analysis, and incident response to support secure operations.
• Collaborate with operational and research leadership to integrate cybersecurity requirements throughout ARL processes.

Required Skills and Experience

• Assessment and authorization of systems and networks using RMF/NIST/ISO standards (e.g., 800‑53), DoD directives, DISA STIG, and other regulatory requirements.
• Strong technical background with significant experience using multiple operating systems, such as Windows and Linux.
• Policy, procedure, plan of action and milestone, risk assessment, and security plan development with experience monitoring for compliance.
• Working knowledge of system functions, security policies, technical security safeguards, and operational security measures.
• Management or leadership experience in the information technology and security space.
• Ability to obtain and maintain information security certifications (e.g., Security+, CISSP).
• Success in an office environment requiring strong communication and organizational skills.
• Proven ability to work both independently and collaboratively in a multidisciplinary, team‑oriented culture.
• Current eligibility for access to classified information at the Top Secret/Sensitive Compartmented Information (TS/SCI) level with a minimum of a CI polygraph.

Preferred Skills and Experience

• Bachelor’s degree in Information Security, Information Technology, or Computer Science.
• Vulnerability scanning and mitigation using tools such as Nessus, SCAP Compliance Checker, or similar.
• Networking fundamentals, including concepts, tools, and administrative functions.
• SIEM management or analysis experience (e.g., Splunk).
• VMware and virtual machine management.
• Development of training material.

Education, Experience & Certifications

• Bachelor’s Degree.
• 8+ years of relevant experience, including at least 3 years of supervisory experience (or an equivalent combination of education and experience).
• Required certifications: None specified.

Salary & Benefits

• Salary range: $146,040.00 – $240,960.00 (adjusted for geographic location).
• Competitive benefits package including comprehensive medical, dental, and vision coverage.
• Robust retirement plans.
• Substantial paid time off (holidays, vacation, sick leave).
• Generous tuition discount of 75% for employees and eligible spouses and children.

Background Checks & Clearances

Employment requires successful completion of background checks in accordance with university policies, eligibility to obtain a government security clearance, participation in the ARL drug‑testing program, and compliance with electronic and physical monitoring requirements applicable to federal contractors. The work environment involves Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted in certain areas. Applicants must be U.S. citizens.