Cyber Security Manager

Your working location will be fully on-site located in Reston, VA. This role requires periodic travel to remote locations.

Find out exactly what skills, experience, and qualifications you will need to succeed in this role before applying below.
We are searching for an experienced Cybersecurity Engineering Manager to oversee team operations for the SPS Cyber/ITS team in the Information Technology Services Division of the Applied Research Laboratory at Penn State. This role will focus on and oversee the Special Programs spaces from the information technology, cybersecurity, and compliance perspective. You will lead a team responsible for secure system design, support, compliance, documentation, and continuous monitoring within classified and sensitive research environments.
You will:Lead and mentor a team of information technology, information security, and cybersecurity professionals, to include hiring, workforce development, performance management, and succession planningDevelop, validate, submit, and maintain information system security plans, certification and authorization packages, security documentation, and plans of action and milestones in support of compliance requirementsOversee design, configuration, security, and systems support, ensuring security controls are properly implemented and maintainedOversee development and implementation of risk assessments against the information system lifecycleMonitor and assist in the assessment of existing and emerging systems and networks to ensure alignment with current cybersecurity policies, concepts, and security measuresPromote cybersecurity awareness by developing training material related to compliance and audit requirements to support employees with audits and security expectationsProvide technical leadership in vulnerability scanning, review of security/event log review, network analysis, and incident response to support secure operationsCollaborate with operational and research leadership to ensure cybersecurity requirements are integrated throughout ARL processes
Required skills/experience areas include:Assessment and authorization of systems and networks using RMFNIST/ISO standards (e.g. 800-53), Department of Defense directives, DISA STIG, and regulatory requirementsStrong technical background with significant experience using multiple operating systems, such as Windows and LinuxPolicy, procedure, plan of action and milestone, risk assessment, and security plan development with experience monitoring for complianceWorking knowledge of system functions, security policies, technical security safeguards, and operational security measuresManagement or leadership experience in the information technology and security spaceThe ability to certify and maintain information security related certifications (eg. Security+ xzbcwsv and CISSP)Success in an office environment, where various forms of communication and organizational skills were crucial to be effectiveSuccess working both independently and collaboratively in a multi-disciplinary, team-oriented cultureCurrent eligibility for access to classified information at the Top Secret/Sensitive Compartmented Information (TS/SCI) level with minimum of CI polygraph
Preferred skills/experience areas include:A Bachelor’s degree in Information Security, Information Technology, or Computer ScienceVulnerability scanning and mitigation utilizing Nessus, SCAP Compliance Checker, or a similar toolNetworking fundamentals, including various concepts, tools, and administrative functionsSEIM management or use for analysis, such as SplunkVMWare and management of Virtual MachinesTraining material development