APPLICATION INSTRUCTIONS:

• CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

• CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

• If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.

JOB DESCRIPTION AND POSITION REQUIREMENTS:

The Cyber and Information Security Department of the Applied Research Laboratory (ARL) at Penn State University is searching for a Cyber Security focused individual who is ready to kick start growth and development toward the beginning of their career. As a member of this team, the selected candidate will support Information Security requirements of our classified networks. This team helps to protect ARL’s network and systems through proactive security, assessing and acting on risks, and ensuring compliance.  We are searching for someone who wants learn and grow their information technology and cyber security skills by helping senior cyber analysts and engineers with complex problems, is comfortable communicating and collaborating with a diverse audience, and is ok working on deliverables in a team environment primarily but also alone when tasked.

ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply.

Responsibilities include:

• Help senior analysts and engineers with development, validation, and submission of information system security plans, security test and evaluation plans, certification and accreditation or authorization packages, and plans of action and milestones in support of compliance requirements

• Take part in conducting, developing, planning, and coordinating risk assessments of information systems in development, test, production and research environments as required by established or newly determined compliance/audit requirements

• Aide in assessments and reviews of systems and networks within the environment to identify where systems/networks deviate from acceptable configurations, enclave policy, and local policy

• Assist senior staff in the completion of technical requirements for networks and systems such as; vulnerability scanning, review of security/event logs, network analysis, security configuration review, and incident response on an as-needed basis

• Focus on professional development in support of the team and its mission

This position will be filled as a level 1. Typical requirements for a level 1 include an Associate’s degree or higher or an equivalent combination of education and experience.

Required skills and experience include:

• Operational experience with security/event log auditing

• Knowledge of or exposure to: Risk Management Framework (RMF), NIST/ISO standards, DoD (Department of Defense) directives, and/or regulatory requirem