Security Engineering Manager I

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA).  Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.  Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.   

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.  
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

The Cyber Security team is seeking a high-performing Security Engineering Manager to join our team. The Manager I in this role will lead a team of security engineers that collectively will be responsible for safeguarding company infrastructure from cyber threats and attacks. The position is responsible for designing, implementing, managing, and enhancing security measures to protect sensitive data, networks, systems, and applications. 

Key Responsibilities

• Lead team of Security Engineers in creating security authorization packages for all classified and unclassified information systems. 
• Lead a team of Security Engineers in system architecting and engineering to ensure secure implementation of new and existing systems and applications. 
• Place emphasis on Vulnerability Management by enforcing adherence to the remediation timeframes outlined in the Cyber Security Program Plan (CSPP). 
• Ensure compliance with existing and new federal orders, policies, and requirements. 
• Responsible for developing, maintaining, and disseminating meaningful metrics, conducting self-assessments and site surveys. 
• Oversee the execution of the Plan of Action and Milestones (POA&M), ensuring compliance with the approved configuration baseline standards, identifying, and addressing unauthorized devices, assessing the state of standalone systems. 
• Develop and execute Cyber Security Supply Chain Risk Management (SCRM) program to prevent injection of malicious/counterfeit software and hardware into the enterprise.
• Develop and maintain a Cyber Security Awareness and Training Program to ensure proper training and shaping of user behavior in cyber security and compliance. 
• Assist the Cyber Security Manager with executing the objectives of the Performance Evaluation and Measurement Plan. 

• Bachelor's degree or equivalent training and experience, plus a minimum of 11 years of related and progressively responsible experience. 

• Strong knowledge of network security principles, protocols, and technologies (e.g., TCP/IP, DNS, VPN, SSL/TLS).

• Hands-on experience with security tools and technologies, such as SAML, OAUTH, SIEM, IDS/IPS, DLP, WAF, EDR, and vulnerability management systems. 

• Familiarity with cloud computing platforms (e.g., AWS, Azure, GCP) from a security perspective. 

• Preferred Certifications (please upload when applying): 

  • Certified Information System Security Professional (CISSP)

  • GIAC Security Essentials (GSEC)

  • GIAC Information Security Professional Certification (GISP)

  • GIAC Security Operations Manager (GSOM)

  • GIA Certified Project Manager (GCPM)

  • Certified Information Security Manager (CISM)

  • CompTIA Security Practitioner (CASP+)

• Excellent analytical, problem-solving, and communication skills with the ability to collaborate effectively with diverse teams and stakeholders. 

• Ability to maintain strict confidentiality. 

• Ability to communicate effectively in English, both verbally and in writing, sufficient to communicate with co-workers, customers, testify, write clear and concise reports, and collect information. 

• Ability to use multiple electronic devices including standard office machines, cellular phones, and security appliances. 

• Ability to articulate highly tec