Cybersecurity Analyst Jobs in Pennsylvania
Cybersecurity Analyst jobs in Pennsylvania are in strong and steady demand, concentrated in defense contracting, financial services, healthcare systems, and state government IT, with openings at every level from entry-level SOC analyst through senior security architect. Philadelphia, Pittsburgh, and the Harrisburg metro account for most of the hiring, where anchor employers like Lockheed Martin, UPMC, and Highmark Health maintain substantial security teams. The most in-demand specialties are cloud security, identity and access management, and threat detection and incident response. Find a role that fits below and apply directly.
Find Cybersecurity Analyst JobsOverview
Showing 5 of 10+ Cybersecurity Analyst jobs
Description
Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?
Entity: Corporate Services
Department: CyberSecurity GRC
Location: 3535 Market Street/hybrid
Summary:
The Cybersecurity GRC Sr. Research Compliance Analyst supports the organization's cybersecurity compliance program by assessing, monitoring, and ensuring adherence to NIST Special Publications requirements for systems that process, store, and/or transmit sensitive information.
The role contributes to internal and external audits, regulatory assessments, and ongoing compliance activities by performing control testing, validating evidence, identifying gaps, and supporting remediation efforts. The senior analyst partners with technical and business stakeholders to ensure controls are effectively implemented and maintained in the secure research enclave, aligning with Office of Research Services and Office of the Vice Provost for Research compliance initiatives.
Responsibilities:
- Primarily conduct assessments against NIST SP 800 171 control families to evaluate compliance for systems handling Controlled Unclassified Information (CUI). Additionally conduct assessments relative to HIPAA, NIST SP 800-53, FISMA, and other standards as necessary.
- Perform control design and operating effectiveness testing, including evidence collection, validation, and documentation.
- Support internal audits, external assessments, and regulatory reviews by preparing documentation, coordinating responses, and participating in walkthroughs and interviews.
- Identify compliance gaps and deficiencies, assess associated risk, and collaborate with system owners and stakeholders to develop and track remediation plans.
- Maintain compliance artifacts including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), control narratives, and assessment results.
- Interpret NIST 800 171 and other framework requirements and provide guidance to technical and business teams on control implementation and documentation expectations.
- Support continuous monitoring activities to ensure sustained compliance with NIST 800 171 and other framework requirements over time.
- Perform other duties as assigned to support the Cybersecurity Governance Risk and Compliance team as directed in accordance with Penn Medicine policies, procedures, and values.
- Performs duties in accordance with Penn Medicine and entity values, policies, and procedures
- Other duties as assigned to support the unit, department, entity, and health system organization
Education or Equivalent Experience:
- Bachelor's degree is required.
- 6+ years of IT and cybersecurity experience is required.
- 3+ years of auditing, assessing, and/or ensuring compliance with published framework(s) is required.
Live Your Life's Work
We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.
Description
Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?
Entity: Corporate Services
Department: CyberSecurity GRC
Location: 3535 Market Street/hybrid
Summary:
The Cybersecurity GRC Sr. Research Compliance Analyst supports the organization's cybersecurity compliance program by assessing, monitoring, and ensuring adherence to NIST Special Publications requirements for systems that process, store, and/or transmit sensitive information.
The role contributes to internal and external audits, regulatory assessments, and ongoing compliance activities by performing control testing, validating evidence, identifying gaps, and supporting remediation efforts. The senior analyst partners with technical and business stakeholders to ensure controls are effectively implemented and maintained in the secure research enclave, aligning with Office of Research Services and Office of the Vice Provost for Research compliance initiatives.
Responsibilities:
- Primarily conduct assessments against NIST SP 800 171 control families to evaluate compliance for systems handling Controlled Unclassified Information (CUI). Additionally conduct assessments relative to HIPAA, NIST SP 800-53, FISMA, and other standards as necessary.
- Perform control design and operating effectiveness testing, including evidence collection, validation, and documentation.
- Support internal audits, external assessments, and regulatory reviews by preparing documentation, coordinating responses, and participating in walkthroughs and interviews.
- Identify compliance gaps and deficiencies, assess associated risk, and collaborate with system owners and stakeholders to develop and track remediation plans.
- Maintain compliance artifacts including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), control narratives, and assessment results.
- Interpret NIST 800 171 and other framework requirements and provide guidance to technical and business teams on control implementation and documentation expectations.
- Support continuous monitoring activities to ensure sustained compliance with NIST 800 171 and other framework requirements over time.
- Perform other duties as assigned to support the Cybersecurity Governance Risk and Compliance team as directed in accordance with Penn Medicine policies, procedures, and values.
- Performs duties in accordance with Penn Medicine and entity values, policies, and procedures
- Other duties as assigned to support the unit, department, entity, and health system organization
Education or Equivalent Experience:
- Bachelor's degree is required.
- 6+ years of IT and cybersecurity experience is required.
- 3+ years of auditing, assessing, and/or ensuring compliance with published framework(s) is required.
Live Your Life's Work
We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.
See All 10 Cybersecurity Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Cybersecurity Analyst JobsCybersecurity Analyst Jobs by City in Pennsylvania
Where Pennsylvania roles are concentrated, by current openings.
Cybersecurity Analyst Job Market in Pennsylvania
A snapshot from current Pennsylvania openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Banking & Financial Services
What Pennsylvania Employers Look For
The qualifications that appear most often in cybersecurity analyst jobs across Pennsylvania.
- Bachelor's degree in cybersecurity, information technology, or a closely related field
- CompTIA Security+ or equivalent industry certification recognized by Pennsylvania employers
- Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Knowledge of NIST Cybersecurity Framework and federal compliance standards like FISMA or HIPAA
- Familiarity with network security, firewalls, intrusion detection, and vulnerability management tools
- Ability to obtain a federal security clearance, required by many Pennsylvania defense contractors
Cybersecurity Analyst Jobs in Pennsylvania: Frequently Asked Questions
How do you become a cybersecurity analyst in Pennsylvania?
Pennsylvania does not issue a state-specific license for cybersecurity analysts, so the path runs through education and industry credentials. Most employers expect at least a bachelor's degree in cybersecurity, computer science, or information technology, followed by CompTIA Security+ as a baseline certification. From there, candidates typically pursue roles in IT support or network administration at Pennsylvania companies or public sector agencies before moving into dedicated analyst positions.
How much do cybersecurity analysts make in Pennsylvania?
Cybersecurity analysts in Pennsylvania earn a median of about $117,770 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $67,840 for the lowest 10% to over $170,870 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire cybersecurity analysts in Pennsylvania?
Employers hiring cybersecurity analysts in Pennsylvania right now include Penn Medicine, Chubb Insurance, and Saxton & Stump, based on current listings on Migrate Mate as of November 2026. Pennsylvania's dense mix of defense contractors, major health systems, and large financial institutions means consistent hiring activity across both private sector and government-adjacent security teams.
Which Pennsylvania cities have the most cybersecurity analyst jobs?
Philadelphia, Lititz, and Newtown have the most cybersecurity analyst openings in Pennsylvania. Philadelphia dominates due to its concentration of financial services firms, healthcare networks, and federal agency satellite offices, while Pittsburgh's strength in technology and academic medical centers drives demand there, and Harrisburg attracts openings tied to state government IT and defense-related work in the surrounding region.
Are there remote cybersecurity analyst jobs in Pennsylvania?
Yes, and more than most fields. Cybersecurity analysis is largely desk-based and tools-driven, making it well suited to remote and hybrid arrangements. About 100% of cybersecurity analyst openings tied to Pennsylvania are remote or hybrid as of November 2026, reflecting how widely distributed security teams have become. Roles in threat monitoring, vulnerability assessment, and security compliance tend to be the most consistently remote-eligible.
How can I get hired as a cybersecurity analyst in Pennsylvania with little or no experience?
The most realistic entry path is moving into a SOC analyst role through an IT helpdesk or network support position at a Pennsylvania employer. Large health systems like UPMC and Jefferson Health, state government agencies, and defense contractors in the Philadelphia and Pittsburgh areas regularly bring on junior analysts from adjacent IT roles. Earning CompTIA Security+ and building a home lab or capture-the-flag portfolio gives candidates a concrete edge when applying to these teams.
Where can I find and apply to cybersecurity analyst jobs in Pennsylvania?
You can find and apply to cybersecurity analyst jobs in Pennsylvania on Migrate Mate, which lists current Pennsylvania openings. Find roles that fit your experience and location and apply directly through each listing.
See All 10 Cybersecurity Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Cybersecurity Analyst Jobs