Penn State Job Catalog

Additional levels that exist for this job profile can be seen below.
Missing levels within the leveling matrix can be added based on business need.

The defined natural career progression within or between job profiles.

Cyber Security Engineer (ARL)

The Cyber Security Engineer evaluates, designs, implements, and sustains secure enterprise and research information systems and networks within the Applied Research Laboratory (ARL), a Department of Defense (DoD)-aligned University Affiliated Research Center (UARC); applies advanced cybersecurity engineering principles, threat intelligence analysis, and risk-based decision-making to develop and maintain resilient, defense-in-depth security architectures that protect mission-critical systems and sensitive government information; integrates secure system design, vulnerability management, incident response, malware analysis, and forensic readiness into enterprise cybersecurity operations; applies threat-informed defense strategies based on evolving adversary tactics, techniques, and procedures (TTPs) to strengthen ARL's cybersecurity posture and ensure compliance with federal, DoD, and institutional security requirements, including the protection of Controlled Unclassified Information (CUI), Export-Controlled Information, and classified research data, as applicable. Notice regarding employment at the Applied Research Laboratory (ARL): Employees must be eligible to obtain a government security clearance, participate in the ARL drug testing program, and comply with electronic and physical monitoring requirements applicable to federal contractors. ARL operates in a secure information environment involving Unclassified, Controlled Unclassified Information (CUI), and Classified information. Personal electronic devices brought onsite must be registered and may be restricted from certain areas.

• Conduct enterprise cybersecurity risk assessments, vulnerability analyses, penetration testing (as authorized), and security evaluations to identify weaknesses and provide risk-informed mitigation strategies across systems, networks, and applications
• Lead and support cybersecurity incident response activities, including detection, analysis, containment, eradication, recovery, and post-incident review of security events affecting ARL systems and networks
• Investigate complex or non-standard security incidents and vulnerabilities, applying advanced cybersecurity engineering techniques to determine root cause and implement effective remediation strategies
• Develop and apply threat-informed defensive cybersecurity strategies based on malware analysis, adversary behavior, and intelligence on evolving tactics, techniques, and procedures (TTPs)
• Design, recommend, and implement secure system architectures and cybersecurity solutions aligned with Zero Trust principles, defense-in-depth strategies, and applicable federal cybersecurity frameworks
• Perform comprehensive system lifecycle security analyses, including secure design review, configuration assessment, testing, deployment, operational support, maintenance, and secure decommissioning/disposal of systems
• Provide engineering support for enterprise cybersecurity systems, including secure operating systems, network infrastructure, identity and access management systems, databases, endpoint protection platforms, and security information and event management (SIEM) tools
• Develop, configure, and evaluate security monitoring, logging, alerting, and analytics capabilities to enhance detection and response effectiveness across enterprise environments
• Conduct digital forensic preservation and analysis of systems, storage media, and related artifacts in accordance with established chain-of-custody procedures and evidentiary handling standards
• Support coordination with external stakeholders, including federal agencies, law enforcement entities, DoD cybersecurity organizations, and intelligence community partners, as authorized and appropriate
• Design, recommend, and implement cybersecurity processes, procedures, and technical standards to improve operational efficiency, security posture, and compliance with regulatory requirements
• Participate in security architecture reviews and engineering design efforts to integrate cybersecurity controls into new and existing systems and enterprise solutions
• Develop, test, and integrate advanced cybersecurity capabilities, including detection engineering, automated response mechanisms, secure configurations, and system hardening strategies
• Develop and deliver cybersecurity training, awareness materials, and technical guidance to promote secure practices across technical and non-technical personnel
• Ensure protection of Controlled Unclassified Information (CUI), Export-Controlled Information, proprietary research data, and classified information through enforcement of security controls, secure configurations, encryption standards, and access restrictions
• Evaluate emerging cybersecurity technologies, tools, threat landscapes, and industry best practices; recommend improvements to enhance ARL's cybersecurity resilience and mission assurance capabilities
• Collaborate with cybersecurity, system administration, network engineering, software development, security operations, export control, compliance, and research stakeholders to ensure integrated security across enterprise systems
• May supervise staff, including hiring, onboarding, training, work assignment, performance management, and professional development

Level:

– Principal Professional

Base Description:

– Completes activities, tasks, and/or projects of a functional nature.

Level Summary:

– Displays mastery of defined skill areas/applications, principles, theories and practices. Evaluates and enhances existing practices. Recognizes emerging trends in area of expertise. Works independently on complex or strategic assignments. Directs and delegates appropriate tasks to others. Implements strategies to ensure achievement of initiatives. Prepares written and/or verbal presentations or proposals on complex issues and deliver to broad audiences. Identifies and implements innovative solutions to important, highly complex strategic and/or operational issues.

Supervisory Responsibilities:

– Indirect supervisor for other full–time employees
– May serve as direct supervisor for part–time, student, and/or temporary workers, volunteers, or a full–time employee

Fiscal Responsibilities:

– Validates and pays invoices
– Monitors and tracks budgets and funding
– May plan and forecast budgets

Problem Solving:

– Encounters complex and novel problems
– Applies policies, practices, specialized knowledge, and skills to resolve problems
– Understands benefits, limitations, and impact of potential solutions
– Anticipates potential problems and recommends possible solutions within general guidelines

Independence of Action:

– Works independently on complex or strategic assignments
– Uses existing practices as guidelines as well as working knowledge to determine specific work methods
– Carries out work activities independently, with supervisor available to resolve problems
– Reviews work of others to verify technical soundness

Communication and Collaboration:

– Communicates with both internal and external audiences
– Collaborates closely with team members and area leads across the University
– Prepares written and/or verbal presentations or proposals on complex issues and delivers to a broad variety of audiences
– Establishes and maintains networks to facilitate successful communication among units

• Comp Grade – O
• Minimum – $140,004.00
• MidPoint – $185,508.00
• Maximum – $231,000.00

• Computer network security
• Crisis management
• Enterprise information systems
• Malware analysis
• Policy analysis
• Risk analysis
• Security engineering
• System auditing
• System design
• System monitoring
• Systematic inventive thinking
• Technical development
• Trend analysis