Salary: $78,925.00 - $119,844.00 Annually
Location : Dauphin County, PA
Job Type: Civil Service Permanent Full-Time
Job Number: CSSC-2026-58739-01518
Department: Executive Offices
Division: EX OA Entrprs Info Scy Off
Opening Date: 09/29/2026
Closing Date: 10/12/2026 11:59 PM Eastern
Job Code: 01518
Position Number: 00072725
Union: Non-Union
Bargaining Unit: A3
Pay Group: ST09
Bureau / Division Code: 00812811
Bureau / Division: Enterprise Information Security Office
Worksite Address: 400 North Street, 5th Floor
City: Harrisburg, Pennsylvania
Zip Code: 17120
Contact Name: Matthew Zyroll
Contact Phone: Contact Email: THE POSITION The Enterprise Information Security Office is seeking an energetic Information Security Specialist 2 who is ready to help protect critical systems across the Commonwealth. This role offers the chance to work with advanced tools and secure vital network access points. You will help agencies stay safe from threats while supporting important public services. Join a team where your skills make a real difference every day.
DESCRIPTION OF WORKThis position focuses on designing, managing, and supporting security operations across Commonwealth networks, including firewalls, monitoring systems, and secure access tools. As an Information Security Specialist 2, you will perform the following duties:
- Security Configuration: Configure and maintain security policies for firewalls, intrusion prevention tools, and remote access systems
- Infrastructure Oversight: Oversee security operations infrastructure for new facilities and ensure reliable ongoing support
- Incident Response: Lead investigations of security violations and coordinate actions using established response procedures
- System Administration: Administer and monitor firewalls, operating systems, and security software to maintain protection and stability
- Policy Coordination: Collaborate with agencies and teams to review access requirements and assist with developing enterprise security policies
- Access Compliance: Test, document, and evaluate network access measures to ensure alignment with standards and requirements
Interested in learning more? Additional details regarding this position can be found in the position description.
Work Schedule and Additional Information:- Full-time employment
- Work hours are 8:00 AM to 4:30 PM, Monday - Friday, with a 60-minute lunch.
- Telework: You may have the opportunity to work from home (telework) part-time, up to 3 days per week. In order to telework, you must have a securely configured high-speed internet connection and work from an approved location inside Pennsylvania. If you are unable to telework, you will have the option to report to the headquarters office in Harrisburg. The ability to telework is subject to change at any time. Additional details may be provided during the interview.
- Salary: In some cases, the starting salary may be non-negotiable.
- You will receive further communication regarding this position via email. Check your email, including spam/junk folders, for these notices.
REQUIRED EXPERIENCE, TRAINING & ELIGIBILITYQUALIFICATIONSMinimum Experience and Training Requirements:- One year as an Information Security Specialist 1 (Commonwealth job title or equivalent Federal Government job title, as determined by the Office of Administration); or
- Three years of experience performing technical work in information technology security, and an associate's degree in any information technology field; or
- One year of experience performing technical work in information technology security, and a bachelor's degree in any information technology field; or
- An equivalent combination of experience and training.
Other Requirements:- This particular position also requires three or more years of full-time professional experience with zero trust network architecture administration.
- This particular position also requires three or more years of full-time professional experience with firewall administration.
- This particular position also requires possession of a CompTIA Security+ certification.
- You must meet the PA residency requirement. For more information on ways to meet PA residency requirements, follow the link and click on Residency Guidelines.
- You must be able to perform essential job functions.
Legal Requirements:- A conditional offer of employment will require submission of criminal history reports. See hiring agency contact information.
- You must pass a background investigation and meet Criminal Justice Information Services (CJIS) compliance requirements.
How to Apply:- Resumes, cover letters, and similar documents will not be reviewed, and the information contained therein will not be considered for the purposes of determining your eligibility for the position. Information to support your eligibility for the position must be provided on the application (i.e., relevant, detailed experience/education).
- If you are claiming education in your answers to the supplemental application questions, you must attach a copy of your college transcripts for your claim to be accepted toward meeting the minimum requirements. Unofficial transcripts are acceptable.
- Your application must be submitted by the posting closing date. Late applications and other required materials will not be accepted.
- Failure to comply with the above application requirements may eliminate you from consideration for this position.
- All application materials and interview responses must reflect the applicant's own experience, qualifications, and work. Applicants may use generative AI tools for preparation purposes only. Use of AI to misrepresent or falsify information, or to assist during interviews, is not permitted. Review the Guidance for Generative AI Tools & Job Seekers for additional information.
Veterans:- Pennsylvania law (51 Pa. C.S. 7103) provides employment preference for qualified veterans for appointment to many state and local government jobs. To learn more about employment preferences for veterans, go to and click on Veterans.
Telecommunications Relay Service (TRS): - 711 (hearing and speech disabilities or other individuals).
If you are contacted for an interview and need accommodations due to a disability, please discuss your request for accommodations with the interviewer in advance of your interview date.
The Commonwealth is an equal employment opportunity employer and is committed to a diverse workforce. The Commonwealth values inclusion as we seek to recruit, develop, and retain the most qualified people to serve the citizens of Pennsylvania. The Commonwealth does not discriminate on the basis of race, color, religious creed, ancestry, union membership, age, gender, sexual orientation, gender identity or expression, national origin, AIDS or HIV status, disability, or any other categories protected by applicable federal or state law. All diverse candidates are encouraged to apply.
EXAMINATION INFORMATION - Completing the application, including all supplemental questions, serves as your exam for this position. No additional exam is required at a test center (also referred to as a written exam).
- Your score is based on the detailed information you provide on your application and in response to the supplemental questions.
- Your score is valid for this specific posting only.
- You must provide complete and accurate information or:
- your score may be lower than deserved.
- you may be disqualified.
- You may only apply/test once for this posting.
- Your results will be provided via email.
Learn more about our Total Rewards by watching this short !
See the total value of your benefits package by exploring our
Health & WellnessWe offer multiple health plans so our employees can choose what works best for themselves and their families. Our comprehensive benefits package includes health coverage, vision, dental, and wellness programs.*
Compensation & Financial PlanningWe invest in our employees by providing competitive wages and encouraging financial wellness by offering multiple ways to save money and ensure peace of mind including multiple retirement and investment plan options.
Work/Life BalanceWe know there's more to life than just work! Our generous paid leave benefits include paid vacation, paid sick leave, eight weeks of paid parental leave, military leave, and paid time off for most major U.S. holidays, as well as flexible work schedules and work-from-home opportunities.*
Values and CultureWe believe in the work we do and provide continual opportunities for our employees to grow and contribute to the greater good. As one of the largest employers in the state, we provide opportunities for internal mobility, professional development, and the opportunity to give back by participating in workplace charitable giving.
Employee PerksSometimes, it is the little "extras" that make a big difference. Our employees receive special employee-only discounts and rates on a variety of services and memberships.
For more information on all of these Total Rewards benefits, please visit and click on the benefits box.
*Eligibility rules apply.
01
Additional Requirement - Do you possess three or more years of full-time professional experience with zero trust network architecture administration?
02
If you indicated YES to the question above, please describe the details of the experience you possess. Please be sure to address the items listed below in your response. The claimed experience must also be provided within the experience section of your application. If you indicated NO to the question above, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience
- The specific duties you performed related to your experience with zero trust network architecture administration
- Your level of responsibility
03
Additional Requirement - Do you possess three or more years of full-time professional experience with firewall administration?
04
If you indicated YES to the question above, please describe the details of the experience you possess. Please be sure to address the items listed below in your response. The claimed experience must also be provided within the experience section of your application. If you indicated NO to the question above, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience
- The specific duties you performed related to your experience with firewall administration
- Your level of responsibility
05
Additional Requirement - Do you possess a CompTIA Security+ certification?If you are claiming certification, you must attach a copy of your certificate for your claim to be accepted toward meeting the minimum requirements. You must attach your certificate prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add your certificate to the application after it has been submitted.
06
Have you been employed by the Commonwealth of Pennsylvania as an Information Security Specialist 1 for at least one full year?
07
If you are claiming experience in the above question, please list the employer(s) where you gained this experience in the text box below. The employer(s) and a description of the experience must also be included in the appropriate sections of your application if you would like the experience to be considered in the eligibility decision. If you claimed you do not have experience, type N/A in the text box below.
08
How many years of full-time technical information technology security experience do you possess?
- 1 or more years
- 6 months to less than 1 year
- Less than 6 months
- No experience
09
If you are claiming experience in the above question, please list the employer(s) where you gained this experience in the text box below. The employer(s) and a description of the experience must also be included in the appropriate sections of your application if you would like the experience to be considered in the eligibility decision. If you claimed you do not have experience, type N/A in the text box below.
10
How much graduate education do you possess in information technology security?If you are claiming credits/degree, you must upload a copy of your college transcript(s) for this education to be considered in the eligibility decision. Unofficial transcripts are acceptable. You must attach your transcript(s) prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a transcript(s) to the application after it has been submitted.
If your education was acquired outside of the United States, you must upload a copy of your foreign credential evaluation report. We can only accept foreign credential evaluations from organizations that are members of the National Association of Credential Services (NACES). A list of current NACES members can be found by visiting and clicking the Evaluation Services Link.
You must attach your documentation prior to the submission of your application by using the "Attachments" tab on the left. You will not be able to add a document to the application after it has been submitted.
- A conferred master's degree
- 30 credits or more
- 15 credits but less than 30
- Some graduate coursework
- None
11
You must complete the supplemental questions below. These supplemental questions are the exam and will be scored. They are designed to give you the opportunity to relate your experience and training background to the major activities (Work Behaviors) performed in this position. Failure to provide complete and accurate information may delay the processing of your application or result in a lower-than-deserved score or disqualification. You
must complete the application
and answer the supplemental questions. Resumes, cover letters, and similar documents will
not be reviewed for the purposes of determining your eligibility for the position or to determine your score.
All information you provide on your application and supplemental questions is subject to verification. Any misrepresentation, falsification or omission of material facts is subject to penalty. If requested, you must provide documentation, including names, addresses, and telephone numbers of individuals who can verify the validity of the information you provide in the application and supplemental questions.
Read each question carefully. Determine and select which "Level of Performance" most closely represents your highest level of experience/training. List the employer(s)/training source(s) from your Work or Education sections of the application where you gained this experience/training.
The "Level of Performance" you choose must be clearly supported within the description of the experience and training information entered in your application or your score may be lowered. In order to receive credit for experience, you must have worked in a job for at least six months in which the experience claimed was a major function.
If you have read and understand these instructions, please click on the "Yes" button and proceed to the exam questions.If you have general questions regarding the application and hiring process, please refer to our
12
WORK BEHAVIOR 1 - SECURITY AND NETWORK PERFORMANCE MONITORINGMonitors and analyzes network and system performance to detect security threats, deficiencies, and operational malfunctions. Uses performance and threat data to guide corrective actions, optimize network efficiency, and mitigate risks. Collaborates with developers, architects, and other stakeholders to ensure security measures and performance optimizations are integrated into system and software design. Utilizes network management tools to support long-term planning and maintain high availability and resilience.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A.I have experience monitoring and testing applications and systems. I was responsible for managing security threats and ensuring corrective action was taken.
- B. I have experience monitoring and testing applications and systems. I was responsible for notifying the appropriate staff of security threats so corrective action could be taken.
- C. I have successfully completed college-level coursework related to information security monitoring or testing, cybersecurity, or risk mitigation.
- D. I have NO experience or coursework related to this work behavior.
13
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The specific duties you performed related to monitoring and/or testing networks/systems for security.
- Your level of responsibility.
14
If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.
- College/University
- Course Title
- Credits/Clock Hours
15
WORK BEHAVIOR 2 - TECHNICAL ASSISTANCEResponds to escalated incidents by troubleshooting and diagnosing security issues and coordinates with end users and service providers to resolve issues. Provides advice and guidance to business areas on the importance and financial impact of security threats. Researches current security solutions and informs management of emerging technologies.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A. I have experience troubleshooting, diagnosing, and resolving escalated information technology issues. I was responsible for responding to complex technical questions and providing guidance as necessary.
- B. I have experience troubleshooting and resolving information technology issues. I was responsible for responding to questions and resolving routine issues but referred more complex technical questions and issues to someone else for resolution.
- C. I have successfully completed college-level coursework related to information technology troubleshooting.
- D. I have NO experience or coursework related to this work behavior.
16
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The specific duties you performed related to the technical assistance you provided.
- The type(s) of issues you diagnosed, troubleshot, and/or resolved.
- Your level of responsibility.
17
If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.
- College/University
- Course Title
- Credits/Clock Hours
18
WORK BEHAVIOR 3 - INSTALLING/TESTING HARDWARE AND SOFTWAREInstalls and tests network hardware and software including routers, switches, firewalls, or network cabling. Utilizes various tools to test, verify, troubleshoot, and resolve issues. Configures routers, switches, and other hardware and software components. Evaluates and applies all updates, patches, and service packs to equipment and software as needed.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A. I have experience installing and testing network hardware and software. I evaluated the need for updates, patches, and service packs and applied these products when appropriate.
- B. I have experience installing and testing network hardware and software. I applied updates, patches, and services packs based on evaluations and recommendations from other staff.
- C. I have successfully completed college-level coursework related to hardware and software installation and maintenance.
- D. I have NO experience or coursework related to this work behavior.
19
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The actual duties you performed related to installing and testing hardware and software.
- Your level of responsibility.
20
If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.
- College/University
- Course Title
- Credits/Clock Hours
21
WORK BEHAVIOR 4 - DEVELOPING STANDARDS AND PROCEDURESDevelops the standards and procedures for network resources. Develops and implements policies, plans, and standards related to security mechanisms, business standards, and disaster recovery. Develops and approves network optimization standards.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A. I have experience developing information technology standards, policies, and procedures. I was also responsible for implementing changes to these standards, policies, and procedures as necessary.
- B. I have experience implementing information technology standards, policies, and procedures that were developed by someone else. I provided feedback and recommendations for changes to these standards, policies, and procedures.
- C. I have successfully completed college-level coursework related to policy development or data analysis.
- D. I have NO experience or coursework related to this work behavior.
22
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The actual duties you performed related to developing standards, policies, and procedures.
- The type(s) of standards, policies, and procedures you developed.
- Your level of responsibility.
23
If you have selected the level of performance pertaining to college coursework, please provide your responses to the three items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.
- College/University
- Course Title
- Credits/Clock Hours
24
WORK BEHAVIOR 5 - SECURITYDetermines and establishes the access control methods and standards for various equipment such as firewalls, switches, routers, or other communication hardware to support the security of the network. Researches current security solutions and informs management of emerging technologies.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A. I have experience ESTABLISHING access control methods and standards for security in a network environment. I was RESPONSIBLE FOR RESEARCHING current security solutions and their potential impacts regarding network security.
- B. I have experience RESEARCHING security solutions and their potential impacts regarding network security. I PROVIDED RECOMMENDATIONS but someone else determined the access control methods and standards for security in a network environment.
- C. I have successfully completed college-level coursework related to network security.
- D. I have NO experience or coursework related to this work behavior.
25
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The actual duties you performed related to security.
- Your level of responsibility
26
If you have selected the level of performance pertaining to college coursework, please provide your responses to the items listed below. If you indicated you have no education/training related to this work behavior, type N/A in the text box below.
- College/University
- Course/Title
- Credit/Clock Hours
27
WORK BEHAVIOR 6 - FIREWALL ADMINISTRATIONDevelops firewall filters based on established policies and industry best practices to secure and regulate network traffic. Monitors firewall systems to identify client/server vulnerabilities, malware, and worm signatures and identify any intrusion attempts. Makes changes as needed.
Levels of PerformanceSelect the Level of Performance that best describes your claim.
- A. I have experience developing firewall filters to secure and regulate network traffic. I was responsible for monitoring firewall systems to identify client/server vulnerabilities and intrusion attempts.
- B. I have experience monitoring firewall systems to identify client/server vulnerabilities and intrusion attempts. Someone else developed the firewall filters.
- C. I have successfully completed college-level coursework related to information security monitoring.
- D. I have NO experience or coursework related to this work behavior.
28
In the text box below, please describe your experience as it relates to the level of performance you claimed in this work behavior. Please be sure your response addresses the items listed below which relate to your claim. If you indicated you have no work experience related to this work behavior, type N/A in the box below.
- The name(s) of the employer(s) where you gained this experience.
- The actual duties you performed related to firewall administration.
- The types of firewall filters you developed.
- Your level of responsibility.
Required Question
Never miss an opportunity! Create an alert based on the job you applied for.
