Job description

APPLICATION INSTRUCTIONS: CURRENT PENN STATE EMPLOYEE (faculty, staff, technical service, or student), please login to Workday to complete the internal application process . Please do not apply here, apply internally through Workday. CURRENT PENN STATE STUDENT (not employed previously at the university) and seeking employment with Penn State, please login to Workday to complete the student application process. Please do not apply here, apply internally through Workday. If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants . Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants . POSITION SPECIFICS Your working location will be fully on-site located in Reston, VA. This role requires periodic travel to remote locations. We are searching for an experienced Cybersecurity Engineering Manager to oversee team operations for the SPS Cyber/ITS team in the Information Technology Services Division of the Applied Research Laboratory at Penn State. This role will focus on and oversee the Special Programs spaces from the information technology, cybersecurity, and compliance perspective. You will lead a team responsible for secure system design, support, compliance, documentation, and continuous monitoring within classified and sensitive research environments. You will: Lead and mentor a team of information technology, information security, and cybersecurity professionals, to include hiring, workforce development, performance management, and succession planning Develop, validate, submit, and maintain information system security plans, certification and authorization packages, security documentation, and plans of action and milestones in support of compliance requirements Oversee design, configuration, security, and systems support, ensuring security controls are properly implemented and maintained Oversee development and implementation of risk assessments against the information system lifecycle Monitor and assist in the assessment of existing and emerging systems and networks to ensure alignment with current cybersecurity policies, concepts, and security measures Promote cybersecurity awareness by developing training material related to compliance and audit requirements to support employees with audits and security expectations Provide technical leadership in vulnerability scanning, review of security/event log review, network analysis, and incident response to support secure operations Collaborate with operational and research leadership to ensure cybersecurity requirements are integrated throughout ARL processes Required skills/experience areas include: Assessment and authorization of systems and networks using RMF NIST/ISO standards (e.g. 800-53), Department of Defense directives, DISA STIG, and regulatory requirements Strong technical background with significant experience using multiple operating systems, such as Windows and Linux Policy, procedure, plan of action and milestone, risk assessment, and security plan development with experience monitoring for compliance Working knowledge of system functions, security policies, technical security safeguards, and operational security measures Management or leadership experience in the information technology and security space The ability to certify and maintain information security related certifications (eg. Security and CISSP) Success in an office environment, where various forms of communication and organizational skills were crucial to be effective Success working both independently and collaboratively in a multi-disciplinary, team-oriented culture Current eligibility for access to classified information at the Top Secret/Sensitive Compartmented Information (TS/SCI) level with minimum of CI polygraph Preferred skills/experience areas include: A Bachelor’s degree in Information Security, Information Technology, or Computer Science Vulnerability scanning and mitigation utilizing Nessus, SCAP Compliance Checker, or a similar tool Networking fundamentals, including various concepts, tools, and administrative functions SEIM management or use for analysis, such as Splunk VMWare and management of Virtual Machines Training material development MINIMUM EDUCATION, WORK EXPERIENCE & REQUIRED CERTIFICATIONS Bachelor's Degree 8+ years of relevant experience, includes 3+ years of supervisory experience; or an equivalent combination of education and experience accepted Required Certifications: None ARL’s purpose is to research and develop innovative solutions to challenging scientific, engineering, and technology problems in support of the Navy, the Department of Defense (DoD), and the Intel Community (IC). FOR FURTHER INFORMATION on ARL, visit our web site at www.arl.psu.edu. BACKGROUND CHECKS/CLEARANCES Employment with the University will require successful completion of background check(s) in accordance with University policies. Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas. You must be a U.S. citizen to apply. SALARY & BENEFITS The salary range for this position, including all possible grades, is $146,040.00 - $240,960.00. This salary range includes an adjustment based on required geographic work location. Salary Structure - Information on Penn State s salary structure Penn State provides a competitive benefits package for full-time employees designed to support both personal and professional well-being. In addition to comprehensive medical, dental, and vision coverage, employees enjoy robust retirement plans and substantial paid time off which includes holidays, vacation and sick time. One of the standout benefits is the generous 75% tuition discount, available to employees as well as eligible spouses and children. For more detailed information, please visit our Benefits Page . CAMPUS SECURITY CRIME STATISTICS Pursuant to the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act and the Pennsylvania Act of 1988, Penn State publishes a combined Annual Security and Annual Fire Safety Report (ASR). The ASR includes crime statistics and institutional policies concerning campus security, such as those concerning alcohol and drug use, crime prevention, the reporting of crimes, sexual assault, and other matters. The ASR is available for review here . EEO IS THE LAW Penn State is an equal opportunity employer and is committed to providing employment opportunities to all qualified applicants without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. If you are unable to use our online application process due to an impairment or disability, please contact 814-865-1473. Federal Contractors Labor Law Poster PA State Labor Law Poster Penn State Policies Copyright Information Hotlines

Requirements

Must-haves

If you are NOT a current employee or student, please click “Apply” and complete the application process for external applicants .
Approval of remote and hybrid work is not guaranteed regardless of work location. For additional information on remote work at Penn State, see Notice to Out of State Applicants .
Your working location will be fully on-site located in Reston, VA. This role requires periodic travel to remote locations.
Lead and mentor a team of information technology, information security, and cybersecurity professionals, to include hiring, workforce development, performance management, and succession planning
Develop, validate, submit, and maintain information system security plans, certification and authorization packages, security documentation, and plans of action and milestones in support of compliance requirements
Oversee design, configuration, security, and systems support, ensuring security controls are properly implemented and maintained
Oversee development and implementation of risk assessments against the information system lifecycle
Monitor and assist in the assessment of existing and emerging systems and networks to ensure alignment with current cybersecurity policies, concepts, and security measures
Promote cybersecurity awareness by developing training material related to compliance and audit requirements to support employees with audits and security expectations
Provide technical leadership in vulnerability scanning, review of security/event log review, network analysis, and incident response to support secure operations
Collaborate with operational and research leadership to ensure cybersecurity requirements are integrated throughout ARL processes
Assessment and authorization of systems and networks using RMF
NIST/ISO standards (e.g. 800-53), Department of Defense directives, DISA STIG, and regulatory requirements
Strong technical background with significant experience using multiple operating systems, such as Windows and Linux
Policy, procedure, plan of action and milestone, risk assessment, and security plan development with experience monitoring for compliance
Working knowledge of system functions, security policies, technical security safeguards, and operational security measures
Management or leadership experience in the information technology and security space
The ability to certify and maintain information security related certifications (eg. Security and CISSP)
Success in an office environment, where various forms of communication and organizational skills were crucial to be effective
Success working both independently and collaboratively in a multi-disciplinary, team-oriented culture
Current eligibility for access to classified information at the Top Secret/Sensitive Compartmented Information (TS/SCI) level with minimum of CI polygraph
A Bachelor’s degree in Information Security, Information Technology, or Computer Science
Vulnerability scanning and mitigation utilizing Nessus, SCAP Compliance Checker, or a similar tool
Networking fundamentals, including various concepts, tools, and administrative functions

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

Paid Time Off