ICS/SCADA Senior Cyber Security Analyst

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA).  Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.  Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today. 

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.  
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

The Cyber Security team is seeking a high-performing ICS SCADA Senior Security Analyst to join our team. The selected candidate will work with control system SMEs and operational staff to design, implement, and support the security of ICS networked systems. 

Key Responsibilities

• Serve as Senior Operational Technology (OT) analyst specializing in Industrial Control Systems (ICS) and (Supervisory Control and Data Acquisition) systems.
• Assist with determining the security and configuration status of OT/ICS/SCADA systems and components including system documentation, Linux and Windows operating systems, Virtual Environments, and Network Infrastructure.
• Assist in researching, compiling, and analyzing technical data pertaining to SCADA and other OT/ICS systems.
• Assist the ISSM and ISSOs with the execution of their assigned duties.
• Use established standards, practices, and procedures as well as an increasing technical knowledge to solve problems and complete projects.
• Review Cyber Security threat information and assists with mitigating vulnerabilities identified.
• Conduct a variety of Cyber Security policy compliance tasks such as discovering unauthorized devices, conducting site surveys for non-compliance, and ensuring network access requirements are met.
• Perform Security Test and Evaluations of information systems in support of a security plan.
• Write basic information system security plans (ISSPs) for OT/ICS/SCADA systems.
• Complete certification and accreditation of information systems on OT/ICS/SCADA systems and networks, assists with the completion and mitigation of security testing and evaluations results.
• Design OT/ICS/SCADA systems with a security focus, ensuring systems are developed in accordance with federal law, customer requirements, certification and accreditation requirements, and industry best practices.
• Review current Cyber Security threat information and assists the Threat Evaluation Team with mitigating vulnerabilities identified.
• Collaborate with other outside Cyber Security interests such as Counterintelligence, other DOE sites, US CERT, and law enforcement.
• Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring, and compiling reports for auditors.
• Perform other duties assigned by Management.

• A Bachelor’s degree or equivalent training and experience in a computer-related field and at least 5 years of related experience.
• Demonstrate thorough understanding of basic principles, theories, standards, practices, protocols, and procedures used in Cyber Security.
• Knowledge of Industrial Control Systems, Operational Technology, and/or SCADA systems.
• Possess considerable organization and project management skills.
• Preferred Certifications
  • Global Industrial Cyber Security Professional (GICSP)
  • GIAC Response and Industrial Defense (GRID)
  • Offensive Security Certified Professional (OSCP)
  • GIAC Certified Penetration Tester (GPEN)
  • Certified Information Systems Security Professional (CISSP)
  • GIAC Security Essentials (GSEC)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (CEH)
  • Certified in Risk and Information Systems Control