Cyber Security Information Analyst

Penn State University

21h•$92,100 - $174,708•Hybrid

About The Position

We are seeking a Cyber Security Information Analyst to join the Navigation Research and Development Division (NRDD) of the Applied Research Laboratory (ARL) at Penn State. The NRDD, primarily located in both State College, PA and Warminster, PA, focuses on the execution of interdisciplinary research and development programs supporting strategic underwater navigation systems. The Cyber Security Information Analyst supports the protection, authorization, and continuous monitoring of information systems and networks within the Applied Research Laboratory (ARL), a Department of Defense (DoD)-aligned University Affiliated Research Center (UARC). ARL is an authorized DoD SkillBridge partner and welcomes all transitioning miliary members to apply.

Requirements

Active Top Secret security clearance
Support of Department of Defense programs
Strategic navigation technologies and submarine systems
Advanced research and development programs
Expertise with PNT technologies which may include Inertial Navigation, Global Positioning System, Alternative Navigation Technologies, Geophysical Navigation, Sonar Navigation
Excellent presentation skills and effective written and oral communication
Bachelor's Degree 6+ years of relevant experience (if Senior Professional); or Bachelor's Degree 3+ years of relevant experience (if Advanced Professional); or an equivalent combination of education and experience accepted

Responsibilities

Provide cyber security support to ARL program sponsors
Collaborate with government, industry partners, system owners, engineers, researchers, IT administrators, and security personnel to define security requirements and ensure system design, deployment, and operation
Conduct cybersecurity risk assessments across information systems, networks, and applications to evaluate security posture and provide recommendations aligned with DoD cybersecurity requirements and organizational risk tolerance
Perform vulnerability scanning, configuration compliance assessments, and security control validation to identify deviations from approved baselines, security standards, and authorized system configurations
Develop, document, and maintain Plans of Action and Milestones (POA&M) to track remediation of identified vulnerabilities, control deficiencies, and compliance gaps; monitor corrective actions through resolution
Support Risk Management Framework (RMF) activities, including system categorization, security control selection and implementation, assessment preparation, authorization package development, and continuous monitoring support
Assist in the authorization and accreditation (A&A) process by preparing and maintaining security documentation, including System Security Plans (SSPs), security control assessments, and supporting artifacts required for system approval to operate
Implement and validate cybersecurity policies, procedures, technical safeguards, and configuration standards; provide recommendations for strengthening security posture and reducing organizational risk
Support the protection of Controlled Unclassified Information (CUI), Export-Controlled Information, research data, and other sensitive information through enforcement of access controls, encryption requirements, secure configurations, and monitoring practices
Develop and maintain procedures for incident response support, forensic readiness, evidence preservation, and chain-of-custody documentation in coordination with cybersecurity and security operations teams
Participate in incident response activities, including investigation support, containment coordination, and post-incident analysis, as required
Evaluate emerging cybersecurity threats, vulnerabilities, technologies, and best practices; assess applicability and recommend improvements to existing security programs and controls
Ensure compliance with applicable cybersecurity frameworks, including NIST SP 800-53, NIST Risk Management Framework (RMF), DoD cybersecurity policies, and organizational security directives
Support audit readiness and external assessments by preparing documentation, responding to security inquiries, and validating compliance with required cybersecurity controls
Collaborate with cybersecurity, information assurance, security operations, system administration, export control, compliance, and research stakeholders to ensure coordinated and consistent security implementation across the enterprise