Principal Cyber Security Analyst - Security Engineering

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA).  Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.  Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.   

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.  
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

MSTS is seeking an experienced candidate for Principal Cyber Security Analyst - Security Engineering. The Principal Cyber Security Analyst will play a critical role in safeguarding company infrastructure from cyber threats and attacks. This position is responsible for designing, implementing, managing, and enhancing security measures to protect sensitive data, networks, systems, and applications. 

Key Responsibilities

• Serve as the Alternate Information System Security Manager (A-ISSM) and assist the ISSM in ensuring that the security features, practices, procedures, and architecture of company information systems accurately mediates and enforces security policy. 
• Select, and review control baselines to secure information security systems. 
• Generate and review information system security documentation. 
• Assist the ISSM in generating and reviewing information system assessment and authorization documentation. 
• Assist with developing Cyber Security policies and procedures to ensure that federal regulations are followed when utilizing information systems. 
• Contribute to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner always. 
• Maintain cooperative and respectful working relationships with Cyber Security staff, other divisions, and other customers. 
• Strong understanding of NIST security standards. Ability to apply NIST-defined measures to harden information infrastructure. 
• Review Cyber Security threat information and assist with mitigating identified vulnerabilities.
• Conduct Cyber Security policy compliance tasks including discovering unauthorized devices, conducting site surveys for non-compliance, and ensuring network access requirements are met. 
• Perform Security Test and Evaluations of information systems in support of a security plan. 
• Review information system plans for classified and unclassified systems. 
• Complete certification and accreditation of information systems on classified and unclassified systems and networks, assist with the completion and mitigation of security testing and evaluation results. 
• Collaborate with cross-functional teams to design, deploy, and maintain security controls, including firewalls, intrusion detection/prevention systems, endpoint protection, encryption, and multi-factor authentication solutions. 
• Design networks and systems with a security focus, ensuring systems are developed in accordance with federal law, customer requirements, certification and accreditation requirements, and industry best practices. 
• Review purchase requests for technology items and provide input to Principal level Cyber Security staff regarding the risk associated with purchases. 
• Review current Cyber Security threat information and assist the Threat Evaluation Team with mitigating vulnerabilities identified. 
• Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring and compiling reports for auditors. 
• Perform other duties assigned by Management. 

• Bachelor’s degree or equivalent training and experience in a computer-related field and at least 8 years of experience. 
• Strong knowledge of network security principles, protocols, and technologies (e.g., TCP/IP, DNS, VPN, SSL/TLS). 
• Hands-on experience with security tools and technologies, such as SAML, OAUTH, SIEM, IDS/IPS, DLP,