Senior Cybersecurity Analyst Jobs in Pennsylvania
Senior Cybersecurity Analyst jobs in Pennsylvania are highly active, with strong and sustained demand concentrated in financial services, defense contracting, healthcare systems, and state government across a range from mid-level practitioners through director-track seniors. Philadelphia, Pittsburgh, and the Harrisburg corridor account for the largest share of openings, where employers like Comcast, UPMC, and Lockheed Martin maintain significant security operations. The most sought-after specialties in Pennsylvania listings are threat intelligence, cloud security, and incident response. Find a role that fits below and apply directly.
Find JobsOverview
Showing 5 of 10+ Senior Cybersecurity Analyst jobs
Description
Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?
Entity: Corporate Services
Department: CyberSecurity GRC
Location: 3535 Market Street/hybrid
Summary:
The Cybersecurity GRC Sr. Research Compliance Analyst supports the organization's cybersecurity compliance program by assessing, monitoring, and ensuring adherence to NIST Special Publications requirements for systems that process, store, and/or transmit sensitive information.
The role contributes to internal and external audits, regulatory assessments, and ongoing compliance activities by performing control testing, validating evidence, identifying gaps, and supporting remediation efforts. The senior analyst partners with technical and business stakeholders to ensure controls are effectively implemented and maintained in the secure research enclave, aligning with Office of Research Services and Office of the Vice Provost for Research compliance initiatives.
Responsibilities:
- Primarily conduct assessments against NIST SP 800 171 control families to evaluate compliance for systems handling Controlled Unclassified Information (CUI). Additionally conduct assessments relative to HIPAA, NIST SP 800-53, FISMA, and other standards as necessary.
- Perform control design and operating effectiveness testing, including evidence collection, validation, and documentation.
- Support internal audits, external assessments, and regulatory reviews by preparing documentation, coordinating responses, and participating in walkthroughs and interviews.
- Identify compliance gaps and deficiencies, assess associated risk, and collaborate with system owners and stakeholders to develop and track remediation plans.
- Maintain compliance artifacts including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), control narratives, and assessment results.
- Interpret NIST 800 171 and other framework requirements and provide guidance to technical and business teams on control implementation and documentation expectations.
- Support continuous monitoring activities to ensure sustained compliance with NIST 800 171 and other framework requirements over time.
- Perform other duties as assigned to support the Cybersecurity Governance Risk and Compliance team as directed in accordance with Penn Medicine policies, procedures, and values.
- Performs duties in accordance with Penn Medicine and entity values, policies, and procedures
- Other duties as assigned to support the unit, department, entity, and health system organization
Education or Equivalent Experience:
- Bachelor's degree is required.
- 6+ years of IT and cybersecurity experience is required.
- 3+ years of auditing, assessing, and/or ensuring compliance with published framework(s) is required.
Live Your Life's Work
We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.
Description
Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?
Entity: Corporate Services
Department: CyberSecurity GRC
Location: 3535 Market Street/hybrid
Summary:
The Cybersecurity GRC Sr. Research Compliance Analyst supports the organization's cybersecurity compliance program by assessing, monitoring, and ensuring adherence to NIST Special Publications requirements for systems that process, store, and/or transmit sensitive information.
The role contributes to internal and external audits, regulatory assessments, and ongoing compliance activities by performing control testing, validating evidence, identifying gaps, and supporting remediation efforts. The senior analyst partners with technical and business stakeholders to ensure controls are effectively implemented and maintained in the secure research enclave, aligning with Office of Research Services and Office of the Vice Provost for Research compliance initiatives.
Responsibilities:
- Primarily conduct assessments against NIST SP 800 171 control families to evaluate compliance for systems handling Controlled Unclassified Information (CUI). Additionally conduct assessments relative to HIPAA, NIST SP 800-53, FISMA, and other standards as necessary.
- Perform control design and operating effectiveness testing, including evidence collection, validation, and documentation.
- Support internal audits, external assessments, and regulatory reviews by preparing documentation, coordinating responses, and participating in walkthroughs and interviews.
- Identify compliance gaps and deficiencies, assess associated risk, and collaborate with system owners and stakeholders to develop and track remediation plans.
- Maintain compliance artifacts including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), control narratives, and assessment results.
- Interpret NIST 800 171 and other framework requirements and provide guidance to technical and business teams on control implementation and documentation expectations.
- Support continuous monitoring activities to ensure sustained compliance with NIST 800 171 and other framework requirements over time.
- Perform other duties as assigned to support the Cybersecurity Governance Risk and Compliance team as directed in accordance with Penn Medicine policies, procedures, and values.
- Performs duties in accordance with Penn Medicine and entity values, policies, and procedures
- Other duties as assigned to support the unit, department, entity, and health system organization
Education or Equivalent Experience:
- Bachelor's degree is required.
- 6+ years of IT and cybersecurity experience is required.
- 3+ years of auditing, assessing, and/or ensuring compliance with published framework(s) is required.
Live Your Life's Work
We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.
See All 10 Senior Cybersecurity Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find JobsSenior Cybersecurity Analyst Jobs by City in Pennsylvania
Where Pennsylvania roles are concentrated, by current openings.
Senior Cybersecurity Analyst Job Market in Pennsylvania
A snapshot from current Pennsylvania openings, updated as new roles post.
Who's Hiring
Top Industries Hiring
- Banking & Financial Services
What Pennsylvania Employers Look For
The qualifications that appear most often in senior cybersecurity analyst jobs across Pennsylvania.
- Active CISSP, CISM, or equivalent certification recognized by Pennsylvania federal and state employers
- Five or more years of hands-on experience in cybersecurity operations or incident response
- Demonstrated expertise in SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Experience securing cloud environments across AWS, Azure, or Google Cloud infrastructure
- Familiarity with NIST Cybersecurity Framework, HIPAA, and Pennsylvania data breach notification law
- Strong ability to communicate risk findings to non-technical executive and compliance stakeholders
Senior Cybersecurity Analyst Jobs in Pennsylvania: Frequently Asked Questions
How do you become a senior cybersecurity analyst in Pennsylvania?
Most senior cybersecurity analyst roles in Pennsylvania require a bachelor's degree in computer science, information security, or a related field, combined with several years of progressive security experience. Pennsylvania has no state-issued cybersecurity license, but employers across Philadelphia, Pittsburgh, and Harrisburg consistently prioritize certifications such as CISSP or CISM. Defense contractors and healthcare systems in the state often require candidates to hold or be eligible for a federal security clearance.
How much do senior cybersecurity analysts make in Pennsylvania?
Senior cybersecurity analysts in Pennsylvania earn a median of about $117,770 a year, based on May 2025 Bureau of Labor Statistics wage data, ranging from around $67,840 for the lowest 10% to over $170,870 for the top 10%. Pay rises with experience, specialty, and employer.
Which companies hire senior cybersecurity analysts in Pennsylvania?
Employers hiring senior cybersecurity analysts in Pennsylvania right now include Penn Medicine, Chubb Insurance, and Saxton & Stump, based on current listings on Migrate Mate as of November 2026. Pennsylvania's mix of large health systems, financial institutions, and defense contractors creates consistent year-round demand for senior-level security talent.
Which Pennsylvania cities have the most senior cybersecurity analyst jobs?
The cities with the most senior cybersecurity analyst openings in Pennsylvania are Philadelphia, Lititz, and Newtown. Philadelphia leads because of its concentration of financial services firms, health systems, and federal agency offices, while Pittsburgh draws heavily from technology companies and Carnegie Mellon-affiliated research, and Harrisburg's openings are driven largely by state government and defense-adjacent contractors.
Are there remote senior cybersecurity analyst jobs in Pennsylvania?
Yes, and more than most fields. About 100% of senior cybersecurity analyst openings tied to Pennsylvania are remote or hybrid as of November 2026, reflecting how much of the work centers on monitoring dashboards, analyzing logs, and writing policy rather than being physically on-site. Roles focused on threat detection, cloud security, and compliance tend to be the most consistently remote-eligible.
How can I get hired as a senior cybersecurity analyst in Pennsylvania with little or no experience?
The most realistic entry path is moving into a junior analyst or security operations center role first, then building toward senior responsibilities over time. UPMC, Comcast, and large Pennsylvania defense contractors regularly hire for SOC analyst and IT security associate positions that serve as stepping stones. Earning a CompTIA Security+ or associate-level certification, combined with hands-on lab work or a capstone project from a Pennsylvania community college or state university program, helps candidates stand out without prior professional experience.
Where can I find and apply to senior cybersecurity analyst jobs in Pennsylvania?
You can find and apply to senior cybersecurity analyst jobs in Pennsylvania on Migrate Mate, which lists current Pennsylvania openings updated regularly. Find the roles that fit your background and apply directly to the employers posting them.
See All 10 Senior Cybersecurity Analyst Jobs in Pennsylvania
Find roles in Pennsylvania that match your experience and apply in just a few clicks.
Find Jobs