Cyber Security Engineer

Penn State’s Applied Research Laboratory (ARL) is looking for a Cyber Security Engineer to help protect research data and systems through proactive security measures, risk assessment and action, and compliance-focused support for work conducted for the Navy, DoD, and the Intel Community. This hybrid role includes on-site work in Warminster, PA.

The position supports secure operations in an environment that includes Unclassified, Controlled Unclassified Information (CUI), and Classified information. You will contribute to security planning, continuous monitoring, and technical security activities that help sustain trust and readiness across research and operational environments.

What you’ll do

• Support the development, validation, and submission of information system security plans, security test and evaluation plans, certification and accreditation or authorization packages, and plans of action and milestones for compliance requirements
• Participate in conducting, developing, planning, and coordinating risk assessments for information systems in development, test, production, and research environments based on established or newly determined compliance and audit needs
• Complete technical security tasks for networks and systems including vulnerability scanning, review of security and event logs, network analysis, security configuration review, and incident response when needed
• Administer and harden DISA STIG compliant Windows/Linux environments across physical and virtual systems, including provisioning, patching, baseline management, and managing AD accounts and groups
• Operate and maintain virtualization platforms such as VMware and Hyper-V, including creating VMs/templates/snapshots, monitoring resources, and optimizing performance
• Perform basic network administration (ports, VLANs, port security), monitor system and network health, respond to alerts, conduct root-cause analysis, and remediate issues
• Support continuous monitoring by deploying Splunk universal forwarders, ensuring log ingestion health, and developing searches, alerts, and dashboards for operations and cyber use

Required experience and knowledge

• Strong practical technical experience across multiple operating systems and technology types, with the ability to audit against compliance requirements
• Knowledge and application of NIST 800-171, NIST 800-53, NISPOM, DAAG, and other regulatory requirements
• Experience with security plan development and/or continuous monitoring tied to security plans
• Strong system and network administration skills
• Active security clearance at the Top Secret level or higher
• Effective analytical, problem-solving, and communication skills
• Strong organizational and multitasking abilities, with aptitude to work independently, as part of a team, and across multiple teams and disciplines
• U.S. citizen to apply
• Completion of background check(s) is required in accordance with University policies
• Must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors

Tools and technologies you’ll work with

• DISA STIG, Windows, Linux
• VMware, Hyper-V, VMs/templates/snapshots
• AD accounts/groups
• Splunk universal forwarders, Splunk, ELK
• NIST 800-171, NIST 800-53
• NISPOM, DAAG, CUI

Compensation and benefits

• Salary range: $92,100 - $174,708 per year (including all possible grades)
• Comprehensive medical, dental, and vision coverage
• Robust retirement plans
• Substantial paid time off including holidays, vacation, and sick time
• 75% tuition discount for employees, and available to eligible spouses and children

Position specifics

• Hybrid work schedule with on-site presence in Warminster, PA and work from home
• Questions related to flexible work should be directed to the hiring manager during the interview process
• Approval of remote and hybrid work is not guaranteed regardless of work location

Notice for ARL onsite work: ARL operates in a secure information environment involving Unclassified, CUI, and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas.

Campus reporting: Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR), which includes crime statistics and institutional policies. The ASR is available for review here.

Required education: Bachelor’s Degree

Level guidance (depending on fill):

• ARL Advanced Professional: Bachelor’s Degree and 3+ years of relevant experience (or an equivalent combination of education and experience accepted)
• ARL Intermediate Professional: Bachelor’s Degree and 1+ years of relevant experience (or an equivalent combination of education and experience accepted)