Primary ICS/SCADA Senior Security Analyst (Sr Cyber Security Analyst)
Company: Unavailable
Location: North Las Vegas
Posted on: May 26, 2023
Job Description:
Overview
Mission Support and Test Services, LLC (MSTS) manages and operates
the Nevada National Security Site (NNSS) for the U.S. National
Nuclear Security Administration (NNSA). - Our MISSION is to help
ensure the security of the United States and its allies by
providing high-hazard experimentation and incident response
capabilities through operations, engineering, education, field, and
integration services and by acting as environmental stewards to the
Site's Cold War legacy. - Our VISION is to be the user site of
choice for large-scale, high-hazard, national security
experimentation, with premier facilities and capabilities below
ground, on the ground, and in the air. (See NNSS.gov for our unique
capabilities.) Our 2,750+ professional, craft, and support
employees are called upon to innovate, collaborate, and deliver on
some of the more difficult nuclear security challenges facing the
world today. - In this environment, the best ideas need to be
voiced and every opinion matters. - As such, MSTS places great
value on Diversity, Equity, and Inclusion and is committed to a
diverse and equitable workforce, with an inclusive culture that
values and celebrates the diversity of our people, talents, ideas,
and perspectives.
- MSTS offers our full-time employees highly competitive salaries
and benefits packages including medical, dental, and vision; both a
pension and a 401k; paid time off and 96 hours of paid holidays;
relocation (if located more than 75 miles from work location);
tuition assistance and reimbursement; and more. -
- MSTS is a limited liability company consisting of Honeywell
International Inc. (Honeywell), Jacobs Engineering Group Inc.
(Jacobs), and HII Nuclear Inc.
NNSS COVID-19 attestation requirements:
https://www.nnss.gov/pages/nfo/WorkingForMSTS.html
Responsibilities
The Information Technology department is seeking a high-performing
individual to join our Cyber Security team and serve as the Senior
Operational Technology (OT) analyst specializing in Industrial
Control Systems (ICS) and Supervisory Control and Data Acquisition
(SCADA) systems. -
Key Responsibilities
- Serve as Senior Operational Technology (OT) analyst
specializing in Industrial Control Systems (ICS) and (Supervisory
Control and Data Acquisition) systems.
- Assist with determining the security and configuration status
of OT/ICS/SCADA systems and components including system
documentation, Linux and Windows operating systems, Virtual
Environments, and Network Infrastructure.
- Assist in researching, compiling, and analyzing technical data
pertaining to SCADA and other OT/ICS systems.
- Assist the ISSM and ISSOs with the execution of their assigned
duties.
- Use established standards, practices, and procedures as well as
an increasing technical knowledge to solve problems and complete
projects.
- Review Cyber Security threat information and assists with
mitigating vulnerabilities identified.
- Conduct a variety of Cyber Security policy compliance tasks
such as discovering unauthorized devices, conducting site surveys
for non-compliance, and ensuring network access requirements are
met.
- Perform Security Test and Evaluations of information systems in
support of a security plan.
- Write basic information system security plans (ISSPs) for
OT/ICS/SCADA systems.
- Complete certification and accreditation of information systems
on OT/ICS/SCADA systems and networks, assists with the completion
and mitigation of security testing and evaluations
results.
- Design OT/ICS/SCADA systems with a security focus, ensuring
systems are developed in accordance with federal law, customer
requirements, certification and accreditation requirements, and
industry best practices.
- Review current Cyber Security threat information and assists
the Threat Evaluation Team with mitigating vulnerabilities
identified.
- Collaborate with other outside Cyber Security interests such as
Counterintelligence, other DOE sites, US CERT, and law
enforcement.
- Assist with data calls, FISMA reporting, compliance scanning
and reporting, continuous monitoring, and compiling reports for
auditors.
Qualifications
- Bachelor's degree or equivalent training and experience in a
computer-related field and at least 5 years of related experience.
Additional experience may be used in lieu of degree.
- Demonstrate thorough understanding of basic principles,
theories, standards, practices, protocols, and procedures used in
Cyber Security.
- Knowledge of Industrial Control Systems, Operational
Technology, and/or SCADA systems.
- Possess considerable organization and project management
skills.
- Ability to maintain strict confidentiality.
- Ability to communicate effectively in English, both verbally
and in writing, sufficient to communicate with co-workers,
customers, write clear and concise reports, gather information, and
collect information.
- Ability to use multiple electronic devices including standard
office machines, cellular phones, and security appliances.
- Ability to articulate highly technical processes and
information to a non-technical audience.
- Ability to meet the physical requirements necessary to perform
all assigned duties safely and effectively.
- Understand the Windows operating system and command line tools,
network protocols, and TCP/IP fundamentals.
- Knowledge of packet inspection, IDS/IPS, HBSS operations,
firewall policies, creation of custom host based and perimeter
IDS/IPS signatures.
- Knowledge of Windows Active Directory and how to configure GPO
settings and various information assurance tools.
- Knowledge of Cyber Security vulnerabilities, mitigation
strategies, network architecture, and how to apply security
controls.
- Preferred Qualifications:
- Global Industrial Cyber Security Professional (GICSP)
- Offensive Security Certified Professional (OSCP)
- GIAC Certified Penetration Tester (GPEN)
- Certified Information Systems Security Professional
(CISSP)
- GIAC Security Essentials (GSEC)
- Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
- Certified in Risk and Information Systems Control
(CRISC)
- GIAC Certified Windows Security Administrator (GCWN)
- GIAC Certified Enterprise Defender (GCED)
- Cisco Certified Network Associate (CCNA)
- Cisco Certified Design Associate (CCDA)
- The primary work location will be at the Losee Road facility in
North Las Vegas, Nevada.
- The schedule for the position will be 4/10s Mondays through
Thursday (subject to change). -
- Personnel may be requested by leadership to work in excess of
40 hours per week due to projects, activities, and emergences;
critical operational demands may occasionally require off-shift
work.
- Pre-placement physical examination, which includes a drug
screen, is required. MSTS maintains a substance abuse policy that
includes random drug testing.
- Must possess a valid driver's license.
MSTS is required by DOE directive to conduct a pre-employment drug
test and background review that includes checks of personal
references, credit, law enforcement records, and
employment/education verifications. Applicants offered employment
with MSTS are also subject to a federal background investigation to
meet the requirements for access to classified information or
matter if the duties of the position require a DOE security
clearance. Substance abuse or illegal drug use, falsification of
information, criminal activity, serious misconduct or other
indicators of untrustworthiness can cause a clearance to be denied
or terminated by DOE, resulting in the inability to perform the
duties assigned and subsequent termination of employment. In
addition, Applicants for employment must be able to obtain and
maintain a DOE Q-level security clearance, which requires U.S.
citizenship, at least 18 years of age. Reference DOE Order -472.2,
"Personnel Security". If you hold more than one citizenship (i.e.,
of the U.S. and another country), your ability to obtain a security
clearance may be impacted.
Department of Energy Q Clearance (position will be cleared to this
level). Reviews and tests for the absence of any illegal drug as
defined in 10 CFR Part 707.4, "Workplace Substance Abuse Programs
at DOE Sites," will be conducted. -Applicant selected will be
subject to a Federal background investigation, required to
participate in subsequent reinvestigations, and must meet the
eligibility requirements for access to classified matter.
Successful completion of a counterintelligence evaluation, which
may include a counterintelligence-scope polygraph examination, may
also be required. Reference 10 CFR Part 709, "Counterintelligence
Evaluation Program."
MSTS is an Equal Opportunity/Affirmative Action Employer. All
qualified applicants will receive consideration for employment
without regard to race, color, religion, sex, sexual orientation,
gender identity, national origin, disability, veteran status or
other characteristics protected by law. MSTS is a background
screening, drug-free workplace.
Annual salary range for this position is: $90,563.20-
$135,844.80.
Starting salary is determined based on the position market value,
the individual candidate education and experience and internal
equity.
Keywords: Unavailable, North Las Vegas , Primary ICS/SCADA Senior Security Analyst (Sr Cyber Security Analyst), Professions , North Las Vegas, Nevada
Didn't find what you're looking for? Search again!
Loading more jobs...