P

Pennsylvania State University

Land-grant university in University Park, PA

Cyber Information Assurance Analyst

Full-TimeUpdated on 10/22/2026
$82.3k - $158.6k
Entry, Junior
Bachelor's
Reston, VA, USA
In PersonWork location is Reston, Virginia; travel to surrounding areas is expected 50% of the time. Remote or hybrid approval is not guaranteed.
CybersecuritySecurity Governance, Risk & Compliance
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required

About the job

Requirements
  • Knowledge of Windows and Linux operating systems.
  • Knowledge of continuous integration and continuous delivery (CI/CD) pipelines.
  • Ability to review hardware and software vulnerabilities.
  • Knowledge of the Department of Defense Risk Management Framework (RMF).
  • Ability to understand and enforce policies and procedures within classified spaces.
  • Experience collaborating in a multidisciplinary, team-oriented culture.
  • Knowledge of the Assured Compliance Assessment Solution (ACAS) and Security Technical Implementation Guides (STIGs).
  • Ability to multitask across multiple programs.
  • Security+, CAP, GSEC, or equivalent certification or qualification.
  • Active Top Secret security clearance and possession of, or eligibility for, Sensitive Compartmented Information (SCI) access.
  • For the Intermediate Professional level: a bachelor's degree and at least one year of relevant experience, or an equivalent combination of education and experience.
  • For the Professional level: a bachelor's degree; no prior relevant work experience is required, and previous relevant work experience may be accepted in lieu of education.
  • Must be a U.S. citizen to apply.
  • Must be eligible to obtain a government security clearance and participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors.
Responsibilities
  • Conduct risk assessments and provide recommendations for system, network, and application design, implementation, and operation of departmental systems.
  • Conduct vulnerability assessments of departmental systems and networks to identify deviations from acceptable configurations or policies.
  • Meet regularly with stakeholders to assess departmental needs and requirements.
  • Monitor corrective actions from departmental system audits and draft Plan of Action and Milestones (POAM) documentation for review.
  • Obtain certification and accreditation for departmental systems through process documentation support, and assist with unit- or University-wide process documentation as needed.
  • Participate in establishing program control processes to ensure risk mitigation.
  • Perform periodic audits of departmental systems under general supervision.
  • Participate in implementing required policies, procedures, and configurations, and recommend improvements.
  • Participate in preparing requirements and procedures for forensic preservation.
  • Research and stay current on industry best practices.
  • At the higher level, lead risk assessments and provide recommendations for design, implementation, and operation of unit-wide systems.
  • At the higher level, lead vulnerability assessments of unit-wide systems and networks, assess non-standard systems, and identify deviations from acceptable configurations or policies.
  • At the higher level, monitor corrective actions from unit-wide system audits and develop and manage POAMs.
  • At the higher level, meet regularly with stakeholders to assess unit-wide needs and requirements.
  • At the higher level, obtain certification and accreditation through process documentation and develop unit- or University-wide process documentation.
  • At the higher level, establish program control processes to ensure risk mitigation.
  • At the higher level, perform periodic audits of systems and implement required policies, procedures, and configurations while recommending improvements.
  • At the higher level, develop requirements and procedures for forensic preservation.
  • Assist in developing policy, process, and standards for the Cyber Incident Response Team (CIRT) program and participate in CIRT activities as needed.
  • Assist in developing and delivering information security training materials.
  • Interface with external entities, including law enforcement and intelligence or government agencies, as needed.
  • Provide guidance to lower-level analysts as needed.
Desired Qualifications
  • Experience developing and maintaining Security Assessment Plans, Risk Assessment Reports, and POAMs.
  • Experience with containerized environments.
  • Experience with GitLab and Ansible.
  • Experience with JIRA and Confluence.
  • Experience with vulnerability-scanning tools such as ACAS, OpenSCAP, Trivy, and Grype.
  • A bachelor's degree in Information Technology, Cybersecurity, or a related field.

About the company

P

Pennsylvania State University

View
Website

Pennsylvania State University is a multi-campus, land-grant public research university whose mission spans undergraduate and graduate education, research, and public service.

Company Size

N/A

Company Stage

N/A

Total Funding

N/A

Headquarters

N/A

Founded

N/A

Get referred to Pennsylvania State University

See people who can refer or advise you