Senior Cyber Security Analyst

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA).  Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.  Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.  In this environment, the best ideas need to be voiced and every opinion matters.  As such, MSTS places great value on Diversity, Equity, and Inclusion and is committed to a diverse and equitable workforce, with an inclusive culture that values and celebrates the diversity of our people, talents, ideas, and perspectives.

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.  
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

The Global Mission Communications Program Division (GMCPD), Emergency Communications Network (ECN) Cyber Security Department is seeking a high performing individual to join our team as a Senior Cyber Security Analyst.  This position is located at the Remote Sensing Laboratory, Nellis (RSLN) on Nellis Air Force Base in Nevada.

Key Responsibilities

• Perform continuous monitoring of system activity in accordance with the approved Continuous Monitoring Strategy using a variety of cybersecurity tools.
• As a key member of the incident response team, ensure adherence to the approved Cybersecurity Incident Response Plan.
• Develop and maintain incident response policies and procedures.
• Perform Security Test and Evaluations of information systems in support of a security plan.
• Participate as a member of the Threat Evaluation Team by recommending threat and vulnerability remediation strategies and assist with implementation.
• Collaborate with outside Cyber Security interests such as Counterintelligence, other DOE sites, US-CERT, and law enforcement.
• Conduct a variety of Cyber Security policy compliance tasks such as discovering unauthorized devices, conducting site surveys for non-compliance, and ensuring network access requirements are met.
• Assist with data calls, compiling reports for auditors, and FISMA reporting.
• Provide Cyber Security guidance and support throughout the IT system life-cycle.
• Ensure configuration compliance of workstations, servers, network devices and other information technology components using approved baselines and compliance scanning tools.
• Stay updated on the latest security threats, technologies, and industry trends, and provide recommendations for improving security posture.
• Assist in researching, compiling, and analyzing technical data.
• Assist the ISSM and ISSOs with the execution of their assigned duties.
• Contribute to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner at all times.
• Perform other duties as assigned by management.

• Bachelor’s degree or equivalent training and experience in a computer-related field and at least 5 years of related experience.
• Knowledge of Windows Active Directory and how to configure GPO settings and various information assurance tools.
• Knowledge of network-based services and client/server applications, familiarity with intrusion detection systems, familiarity with network architecture and security infrastructure placement.
• Knowledge of:
  • System administration principles and practices
  • Network security principles and practices
  • Cybersecurity threats and vulnerabilities
  • Incident response principles and practices
  • Incident response and handling tools and techniques
  • Intrusion detection tools and techniques
  • System threats and vulnerabilities
  • Enterprise information technology (IT) architecture principles and practices
  • Defense-in-depth principles and practices
  • Cyberattack and cyberattack actor characteristics
  • Hardening tools and techniques
  • Cyber-attack stages and cyber intrusion phases
  • Malware analysis tools and techniques
  • Malware analysis principles and practices
  • Network analysis tools and techniques
  • Cyber-attack tools and techniques
• Skilled in:
  • Securing network communications
  • Performing damage assessments
  • Identifying software communications vulnerabilities
  • Evaluating security products
  • Recognizing and categorizing types of vulnerabilities
  • Identifying, capturing, containing, and reporting malware
  • Detecting host- and network-based intrusions
  • Collecting, processing, transporting, and preserving the integrity of digital evidence
  • Protecting a network against malware
  • Performing malware analysis, network data analysis, data analysis, and log analysis
  • Designing and performing incident responses
  • Collaborating with internal and external stakeholders in English, both verbally and in writing
• Ability to maintain strict confidentiality.
• Preferred additional qualifications:
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Windows Security Administrator (GCWN)
  • GIAC Certified Enterprise Defender (GCED)
  • GIAC Security Essentials (GSEC)
  • Cisco Certified Network Associate (CCNA)
  • Cisco Certified Design Associate (CCDA)
• The primary work location will be based at the Remote Sensing Laboratory at Nellis Air Force Base, Las Vegas, NV (RSL-N).
• Work schedule for this position will either be 4/10’s, 9/80, or 5/8’s (per management discretion). Must be willing to perform on-call duty and ensure availability to work non-standard hours.
• Must possess a valid driver's license.

DOE Order 472.2, “Personnel Security”. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Department of Energy Q Clearance (position will be cleared to this level). Reviews and tests for the absence of any illegal drug as defined in 10 CFR Part 707.4, 10 CFR Part 709, “Counterintelligence Evaluation Program.”

MSTS is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other characteristics protected by law. MSTS is a background screening, drug-free workplace.

Annual salary range for this position is: $92,892.80 - $139,339.20.

Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.