Cyber Security Analyst II - Security Engineering

About Mission Support and Test Services, LLC (MSTS)

MSTS manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA). Our MISSION is to help ensure the security of the United States and its allies by providing high‑hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site’s Cold War legacy.

Our VISION is to be the user site of choice for large‑scale, high‑hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.

• MSTS offers our full‑time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

MSTS is seeking a Cyber Security Analyst II – Security Engineering, who possesses the knowledge, skills, and abilities to perform Cyber Security operations within the enterprise environment. The ideal candidate will possess professional certifications such as MCSA, SSCP, CISM, CCENT, GSEC, VCP, CCT, and CEH.

• Assists in researching, compiling, and analyzing technical data.
• Assists the ISSM and ISSOs with the execution of their assigned duties.
• Assists senior Cyber Security staff with the design of networks and systems with a security focus, ensuring systems are developed in accordance with federal law, customer requirements, certification and accreditation requirements, and industry best practices.
• Supports incident response and forensics and collaborates with the incident response team as requested. May conduct forensic software and hardware validations.
• Validate the functionality of security tools within the environment.
• Supports design/deployment/maintenance of new and existing security infrastructure capabilities.
• Conducts a variety of Cyber Security policy compliance tasks such as discovering unauthorized devices, conducting site surveys for non‑compliance, and ensuring network access requirements are met.
• Scans network devices for vulnerabilities and configuration baseline compliance and reports findings.
• Review Cyber Security threat information and assists with mitigating vulnerabilities identified.
• May monitor intrusion detection/prevention systems (IDS/IPS), Security Event and Incident Management (SEIM) tools, endpoint security tools, email gateways, firewalls, network infrastructure and other appliances for security issues.
• Use established standards, practices and procedures as well as an increasing technical knowledge to solve problems and complete projects.
• May conduct forensic software and hardware validations.
• May create logical and physical forensic images of digital evidence via the network or directly from hosts.
• Identify, report, and assist in the remediation of Cyber Security threats and vulnerabilities.
• Contributes to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegial manner at all times. Maintains cooperative and respectful working relationships with Cyber Security Staff, other divisions, and other customers.
• Perform related work as assigned by Supervisor.

• Bachelor’s degree or equivalent in a computer‑related field and at least 2 years of experience in a related field.
  • Two years’ related experience must be in IT or Cyber Security.
  • Professional certifications such as MCSA, SSCP, CISM, CCENT, GSEC, VCP, CCT, and CEH are highly desirable.
• Demonstrated understanding of principles, theories, standards, practices,…