APPLICATION INSTRUCTIONS:

• CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process. Please do not apply here, apply internally through Workday.

• CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday.

• If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants.

Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants.

JOB DESCRIPTION AND POSITION REQUIREMENTS

We are searching for a Part-time Cyber Information Assurance Analyst to join the Risk Management Department, in Reston, VA, in the Applied Research Laboratory (ARL) at Penn State. The CIAA evaluates system and network environments to implement effective cybersecurity programs and determines security controls and policies based on best practices, regulations, and contractual requirements. This role includes managing compliance assessments, mitigating risks to information systems, and ensuring confidentiality, integrity, and availability. CMS Division leverages M&S expertise and other resources to deliver prototypes, demonstrations, and accelerated transitions of emerging research and technologies vital to national security needs, in addition to performing research, development, testing, and evaluations facilitating innovation in practice and development of critical, in-demand capabilities.

ARL is an authorized DoD SkillBridge partner and welcomes all transitioning military members to apply

You will:

• Conduct risk assessments of information systems and provide actionable recommendations across system, network, application, design, and implementation
• Perform vulnerability assessments on systems and networks to identify deviations from security baselines, configurations, and organizational policies
• Execute periodic audits of information systems to monitor user activity, ensure compliance, and identify potential risks
• Develop, document, and maintain Plans of Action and Milestones (POA&Ms) to track and remediate identified vulnerabilities
• Review and evaluate security policies, procedures, and system configurations; recommend improvements to strengthen security posture
• Continuously test and evaluate security processes, identifying weaknesses and driving process improvement
• Research emerging threats, tools, and industry best practices to ensure up-to-date cybersecurity strategies

Minimally requires 4 years’ related experience and currently pursuing a Bachelor’s degree in Cybersecurity and Information Assurance.

Required skills/knowledge areas include:

• Windows and Linux OS
• CI/CD pipeline
• Review of hardware and software vulnerabilities
• Understanding of the Risk Management Framework (RMF)
• Understand and enfor