Penn State Job Catalog

Additional levels that exist for this job profile can be seen below.
Missing levels within the leveling matrix can be added based on business need.

The defined natural career progression within or between job profiles.

Cyber Security Engineer (ARL)

The Cyber Security Engineer evaluates, designs, implements, and sustains secure enterprise and research information systems and networks within the Applied Research Laboratory (ARL), a Department of Defense (DoD)-aligned University Affiliated Research Center (UARC); applies advanced cybersecurity engineering principles, threat intelligence analysis, and risk-based decision-making to develop and maintain resilient, defense-in-depth security architectures that protect mission-critical systems and sensitive government information; integrates secure system design, vulnerability management, incident response, malware analysis, and forensic readiness into enterprise cybersecurity operations; applies threat-informed defense strategies based on evolving adversary tactics, techniques, and procedures (TTPs) to strengthen ARL's cybersecurity posture and ensure compliance with federal, DoD, and institutional security requirements, including the protection of Controlled Unclassified Information (CUI), Export-Controlled Information, and classified research data, as applicable. Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas.

• Conduct enterprise cybersecurity risk assessments, vulnerability analyses, penetration testing (as authorized), and security evaluations to identify weaknesses and provide risk-informed mitigation strategies across systems, networks, and applications
• Lead and support cybersecurity incident response activities, including detection, analysis, containment, eradication, recovery, and post-incident review of security events affecting ARL systems and networks
• Investigate complex or non-standard security incidents and vulnerabilities, applying advanced cybersecurity engineering techniques to determine root cause and implement effective remediation strategies
• Develop and apply threat-informed defensive cybersecurity strategies based on malware analysis, adversary behavior, and intelligence on evolving tactics, techniques, and procedures (TTPs)
• Design, recommend, and implement secure system architectures and cybersecurity solutions aligned with Zero Trust principles, defense-in-depth strategies, and applicable federal cybersecurity frameworks
• Perform comprehensive system lifecycle security analyses, including secure design review, configuration assessment, testing, deployment, operational support, maintenance, and secure decommissioning/disposal of systems
• Provide engineering support for enterprise cybersecurity systems, including secure operating systems, network infrastructure, identity and access management systems, databases, endpoint protection platforms, and security information and event management (SIEM) tools
• Develop, configure, and evaluate security monitoring, logging, alerting, and analytics capabilities to enhance detection and response effectiveness across enterprise environments
• Conduct digital forensic preservation and analysis of systems, storage media, and related artifacts in accordance with established chain-of-custody procedures and evidentiary handling standards
• Support coordination with external stakeholders, including federal agencies, law enforcement entities, DoD cybersecurity organizations, and intelligence community partners, as authorized and appropriate
• Design, recommend, and implement cybersecurity processes, procedures, and technical standards to improve operational efficiency, security posture, and compliance with regulatory requirements
• Participate in security architecture reviews and engineering design efforts to integrate cybersecurity controls into new and existing systems and enterprise solutions
• Develop, test, and integrate advanced cybersecurity capabilities, including detection engineering, automated response mechanisms, secure configurations, and system hardening strategies
• Develop and deliver cybersecurity training, awareness materials, and technical guidance to promote secure practices across technical and non-technical personnel
• Ensure protection of Controlled Unclassified Information (CUI), Export-Controlled Information, proprietary research data, and classified information through enforcement of security controls, secure configurations, encryption standards, and access restrictions
• Evaluate emerging cybersecurity technologies, tools, threat landscapes, and industry best practices; recommend improvements to enhance ARL's cybersecurity resilience and mission assurance capabilities
• Collaborate with cybersecurity, system administration, network engineering, software development, security operations, export control, compliance, and research stakeholders to ensure integrated security across enterprise systems
• May supervise staff, including hiring, onboarding, training, work assignment, performance management, and professional development

Level:

– Professional

Base Description:

– Completes activities, tasks, and/or projects of a functional nature.

Level Summary:

– Demonstrates baseline working knowledge of routine work tasks. Follows the standard principles and practices. Acts under direct and frequent supervision using established procedures with detailed instructions. Participates as a team member and actively contributes to completion of team goals. Clearly communicates information.

Supervisory Responsibilities:

– None

Fiscal Responsibilities:

– Typically none

Problem Solving:

– Encounters routine problems
– Follows recommended course of action and procedures to resolve problems

Independence of Action:

– Work is closely monitored by supervisor
– Detailed instructions and procedures are provided
– Applies standard operating procedures with limited guidelines for deviation

Communication and Collaboration:

– Typically communicates internally within working unit
– Collaborates closely with team members
– Clearly communicates information, ideas, or instructions verbally and in writing

• Comp Grade – J
• Minimum – $75,408.00
• MidPoint – $94,308.00
• Maximum – $113,100.00

• Computer network security
• Crisis management
• Enterprise information systems
• Malware analysis
• Policy analysis
• Risk analysis
• Security engineering
• System auditing
• System design
• System monitoring