Penn State Job Catalog

Additional levels that exist for this job profile can be seen below.
Missing levels within the leveling matrix can be added based on business need.

The defined natural career progression within or between job profiles.

Cyber Security Engineer (ARL)

The Cyber Security Engineer evaluates, designs, implements, and sustains secure enterprise and research information systems and networks within the Applied Research Laboratory (ARL), a Department of Defense (DoD)-aligned University Affiliated Research Center (UARC); applies advanced cybersecurity engineering principles, threat intelligence analysis, and risk-based decision-making to develop and maintain resilient, defense-in-depth security architectures that protect mission-critical systems and sensitive government information; integrates secure system design, vulnerability management, incident response, malware analysis, and forensic readiness into enterprise cybersecurity operations; applies threat-informed defense strategies based on evolving adversary tactics, techniques, and procedures (TTPs) to strengthen ARL's cybersecurity posture and ensure compliance with federal, DoD, and institutional security requirements, including the protection of Controlled Unclassified Information (CUI), Export-Controlled Information, and classified research data, as applicable. Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas.

• Conduct enterprise cybersecurity risk assessments, vulnerability analyses, penetration testing (as authorized), and security evaluations to identify weaknesses and provide risk-informed mitigation strategies across systems, networks, and applications
• Lead and support cybersecurity incident response activities, including detection, analysis, containment, eradication, recovery, and post-incident review of security events affecting ARL systems and networks
• Investigate complex or non-standard security incidents and vulnerabilities, applying advanced cybersecurity engineering techniques to determine root cause and implement effective remediation strategies
• Develop and apply threat-informed defensive cybersecurity strategies based on malware analysis, adversary behavior, and intelligence on evolving tactics, techniques, and procedures (TTPs)
• Design, recommend, and implement secure system architectures and cybersecurity solutions aligned with Zero Trust principles, defense-in-depth strategies, and applicable federal cybersecurity frameworks
• Perform comprehensive system lifecycle security analyses, including secure design review, configuration assessment, testing, deployment, operational support, maintenance, and secure decommissioning/disposal of systems
• Provide engineering support for enterprise cybersecurity systems, including secure operating systems, network infrastructure, identity and access management systems, databases, endpoint protection platforms, and security information and event management (SIEM) tools
• Develop, configure, and evaluate security monitoring, logging, alerting, and analytics capabilities to enhance detection and response effectiveness across enterprise environments
• Conduct digital forensic preservation and analysis of systems, storage media, and related artifacts in accordance with established chain-of-custody procedures and evidentiary handling standards
• Support coordination with external stakeholders, including federal agencies, law enforcement entities, DoD cybersecurity organizations, and intelligence community partners, as authorized and appropriate
• Design, recommend, and implement cybersecurity processes, procedures, and technical standards to improve operational efficiency, security posture, and compliance with regulatory requirements
• Participate in security architecture reviews and engineering design efforts to integrate cybersecurity controls into new and existing systems and enterprise solutions
• Develop, test, and integrate advanced cybersecurity capabilities, including detection engineering, automated response mechanisms, secure configurations, and system hardening strategies
• Develop and deliver cybersecurity training, awareness materials, and technical guidance to promote secure practices across technical and non-technical personnel
• Ensure protection of Controlled Unclassified Information (CUI), Export-Controlled Information, proprietary research data, and classified information through enforcement of security controls, secure configurations, encryption standards, and access restrictions
• Evaluate emerging cybersecurity technologies, tools, threat landscapes, and industry best practices; recommend improvements to enhance ARL's cybersecurity resilience and mission assurance capabilities
• Collaborate with cybersecurity, system administration, network engineering, software development, security operations, export control, compliance, and research stakeholders to ensure integrated security across enterprise systems
• May supervise staff, including hiring, onboarding, training, work assignment, performance management, and professional development

Level:

– Advanced Professional

Base Description:

– Completes activities, tasks, and/or projects of a functional nature.

Level Summary:

– Demonstrates proficient and comprehensive knowledge of defined skill areas/applications. Applies knowledge of principles, practices, and procedures of a particular field to decision-making and problem–solving. Works under minimum supervision on varied and sometimes difficult work assignments, conferring with supervisor or subject matter experts on unusual matters. May lead others or a team in completion of complex assignments. Interprets and communicates information clearly, accurately, and persuasively. Researches and tries new approaches when solving difficult or novel problems.

Supervisory Responsibilities:

– Indirect supervisor or mentor for other full–time employees
– May serve as direct supervisor for part–time, student, and/or temporary workers, volunteers, or a full–time employee

Fiscal Responsibilities:

– May validate and pay invoices
– May monitor/track budgets and funding

Problem Solving:

– Encounters generally routine problems with progressively more complex and/or varied problems
– Typically follows recommended course of action and procedures to resolve problems
– May apply specialized knowledge and skills to resolve complex and/or varied problems, with supervisor oversight
– Researches and tries new approaches when solving problems

Independence of Action:

– Works with minimal supervision on more difficult work assignments, conferring with supervisor on unusual matters
– Follows precedents and procedures
– May set priorities and organize work within general guidelines established by supervisor

Communication and Collaboration:

– Communicates internally and externally within working unit and the University
– May communicate with external audiences for business purposes
– Promotes open communication in a manner that builds relationships among team members
– Applies appropriate strategies for managing conflict; negotiate reasonable compromises; propose and evaluate possible solutions
– Interprets and communicates information, ideas and instructions clearly, accurately and persuasively both verbally and in written materials intended for distribution

• Comp Grade – M
• Minimum – $105,900.00
• MidPoint – $140,304.00
• Maximum – $174,708.00

• Computer network security
• Crisis management
• Enterprise information systems
• Malware analysis
• Policy analysis
• Risk analysis
• Security engineering
• System auditing
• System design
• System monitoring