Job description

APPLICATION INSTRUCTIONS: CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process . Please do not apply here, apply internally through Workday. CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday. If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants . Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants . POSITION SPECIFICS Penn State IT Information Security team is seeking a Cyber Security Systems Engineer who will be responsible for designing, implementing, securing, monitoring, and maintaining an organization’s information systems and security infrastructure. This role works across networks, endpoints, servers, cloud environments, applications, and identity platforms to protect sensitive data and ensure the confidentiality, integrity, and availability of critical systems. This role will collaborate with infrastructure, networking, application development, cloud, and compliance teams to implement security controls, improve system resilience, support regulatory requirements, and strengthen the organization’s overall security posture. SUCCESS IN THE ROLE Success in this role requires a strong understanding of operating systems, networks, applications, databases, cloud services, virtualization, and automation, along with meticulous investigative, analytical, documentation, and problem-solving skills. The ideal candidate will have hands-on cybersecurity experience and be prepared to quickly step into the role, independently apply their technical knowledge, and contribute to ongoing security operations and initiatives. RESPONSIBILITIES Primary Job Duties: Review, investigate, and respond to complex alerts and threat activity related to compromised devices as well as alerts escalated from Tier 1 Correlate data across endpoints, networks, and logs to scope an attack Create dashboards, saved searches, and other SIEM content related to compromised device activity Design, evaluate, implement, and maintain detection and prevention methodologies in response to current threats and minimize false positives to improve alert fidelity Investigate received Indicators of Compromise (IOCs) from various agencies to ensure they are not present in the environment Additional Job Duties: Assist with the forensic preservation of digital evidence, including hard drives Maintain accurate security documentation and update it as needed Assess and monitor the effectiveness of security controls Keep up to date on cybersecurity trends and industry best practices Assist in developing and revising organizational security policies, standards, processes, and guidelines QUALIFICATIONS Degree in Information Security, Risk Management, Information Technology, Cybersecurity, or related field or discipline Experience evaluating, implementing, and maintaining cybersecurity detection and prevention methodologies to address evolving threats and reduce false positives Experience developing and maintaining SIEM content, including dashboards, saved searches, queries, and alerts related to compromised devices and suspicious activity Experience investigating Indicators of Compromise (IOCs) from internal and external sources to identify potential threats within an organization’s environment Experience investigating and responding to complex security alerts and threat activity Experience with security monitoring, incident response, threat detection, and analysis using SIEM, EDR, or other cybersecurity tools MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS Bachelor's Degree 1+ years of relevant experience; or an equivalent combination of education and experience accepted Required Certifications: None PREFERRED CERTIFICATIONS These certifications are preferred but not required: CISSP CISM CompTIA Sec CompTIA CySA BACKGROUND CHECKS/CLEARANCES Employment with the University will require successful completion of background check(s) in accordance with University policies. Penn State does not sponsor or take over sponsorship of a staff employment Visa. Applicants must be authorized to work in the U.S. SALARY & BENEFITS The salary range for this position, including all possible grades, is $72,300.00 - $108,444.00. Salary Structure - Information on Penn State s salary structure Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page . CAMPUS SECURITY CRIME STATISTICS Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here . EEO IS THE LAW Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473. Penn State is committed to and accountable for advancing equity, respect, and belonging. We embrace individual uniqueness, as well as a culture of belonging that supports equity initiatives, leverages the educational and institutional benefits of inclusion in society, and provides opportunities for engagement intended to help all members of the community thrive. We value belonging as a core strength and an essential element of the university’s teaching, research, and service mission. Federal Contractors Labor Law Poster PA State Labor Law Poster Penn State Policies Copyright Information Hotlines

Requirements

Must-haves

If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants .
Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants .
The ideal candidate will have hands-on cybersecurity experience and be prepared to quickly step into the role, independently apply their technical knowledge, and contribute to ongoing security operations and initiatives.
Review, investigate, and respond to complex alerts and threat activity related to compromised devices as well as alerts escalated from Tier 1
Correlate data across endpoints, networks, and logs to scope an attack
Create dashboards, saved searches, and other SIEM content related to compromised device activity
Design, evaluate, implement, and maintain detection and prevention methodologies in response to current threats and minimize false positives to improve alert fidelity
Investigate received Indicators of Compromise (IOCs) from various agencies to ensure they are not present in the environment
Assist with the forensic preservation of digital evidence, including hard drives
Maintain accurate security documentation and update it as needed
Assess and monitor the effectiveness of security controls
Keep up to date on cybersecurity trends and industry best practices
Assist in developing and revising organizational security policies, standards, processes, and guidelines
Degree in Information Security, Risk Management, Information Technology, Cybersecurity, or related field or discipline
Experience evaluating, implementing, and maintaining cybersecurity detection and prevention methodologies to address evolving threats and reduce false positives
Experience developing and maintaining SIEM content, including dashboards, saved searches, queries, and alerts related to compromised devices and suspicious activity
Experience investigating Indicators of Compromise (IOCs) from internal and external sources to identify potential threats within an organization’s environment
Experience investigating and responding to complex security alerts and threat activity
Experience with security monitoring, incident response, threat detection, and analysis using SIEM, EDR, or other cybersecurity tools
MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS
Bachelor's Degree 1+ years of relevant experience; or an equivalent combination of education and experience accepted Required Certifications: None
CompTIA CySA
Employment with the University will require successful completion of background check(s) in accordance with University policies.

Nice-to-haves

These certifications are preferred but not required:

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off