Cyber Incident Response Team - North Las Vegas, United States - Mission Support and Test Services, LLC

Description

Overview:

Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA). Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Sites Cold War legacy. Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today. In this environment, the best ideas need to be voiced and every opinion matters. As such, MSTS places great value on Diversity, Equity, and Inclusion and is committed to a diverse and equitable workforce, with an inclusive culture that values and celebrates the diversity of our people, talents, ideas, and perspectives.

• MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.
• MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.

The Cyber Security team is seeking a high-performing CIRT manager to join our team. The selected candidate will lead, recruit, mentor, and manage highly adaptable and skilled Cyber security Incident Response Team to detect, respond to, and recover from cyber security incidents effectively. This role will involve developing and implementing incident response plans, coordinating incident response activities, and leading investigations into security incidents. Key Responsibilities include but are not limited to:

Key Responsibilities

• Lead, recruit, mentor and manage highly adaptable and skilled Cyber Incident Response Team.
• Develop and maintain incident response plans, procedures, and playbooks to effectively respond to cyber security incidents.
• Coordinate and oversee incident response activities, including detection, containment, eradication, and recovery efforts.
• Serve in a role of Incident lead as a primary point of contact for cyber security incidents, coordinating communication and collaboration with internal teams and external stakeholders.
• Lead investigations into security incidents to determine the root cause, scope, and impact of the incident.
• Collaborate with internal teams and external partners to gather and analyze threat intelligence and indicators of compromise (IOCs) to enhance incident detection and response capabilities.
• Develop and maintain relationships with relevant law enforcement agencies, government agencies, and industry partners to facilitate information sharing and collaboration on cyber threats and incidents.
• Provide leadership and guidance during crisis situations, including coordinating cross-functional teams and communicating with senior leadership and stakeholders.
• Conduct post-incident analysis and lessons learned reviews to identify areas for improvement and implement corrective actions to prevent future incidents.
• Stay current on emerging cyber threats, attack techniques, and trends, and incorporate relevant insights into incident response strategies and procedures.
• Prepare and deliver incident response reports, presentations, and other communications to senior leadership and stakeholders.
• Oversee investigations of Fraud, Waste and Abuse cases and provide case investigative assistance to General Counsel, Labor Relations, and Human Resources elements.
• Develop and manage threat hunting program to proactively search for Cyber threats within the enterprise.
• Oversee Purple team operations to identify points of vulnerability and determine areas of improvement in defensive security posture.
• Lead CIRT team in Blue Team efforts during external penetration testing exercises.

• Bachelor's degree or equivalent training and experience, plus a minimum of 11 years of related and progressively responsible experience.
• Preferred Certifications
• Certified Information System Security Professional (CISSP)
• GIAC Security Essentials (GSEC)
• GIAC Information Security Professional Certification (GISP)
• GIAC Security Operations Manager (GSOM)
• Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response (Certification: GNFA)
• GIAC Certified Penetration Tester (GPEN)
• GIAC Response and Industrial Defense (GRID)
• GIAC Certified Forensic Analyst (GCFA)
• Strong leadership, communication, and interpersonal skills.
• Strong understanding of cybersecurity principles, technologies, and attack vectors.
• Experience with security incident and event management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), endpoint detection and response (EDR) solutions and forensic analysis tools.
• Experience with incident response tools and technologies, such as SIEM, EDR, and forensic analysis tools.
• Knowledge of incident response frameworks and best practices, such as NIST SP 800-61, ISO 27035, Incident Command System (ICS), and SANS incident handling process.
• Strong analytical and problem-solving abilities, with the ability to analyze complex security incidents and identify effective response strategies.
• Ability to work effectively in a fast-paced, dynamic environment and manage competing priorities.
• Advanced knowledge of IT security standards and frameworks, such as MITRE ATT&CK. Excellent analytical, problem-solving, and communication skills with the ability to collaborate effectively with diverse teams and stakeholders.
• Ability to pass a federal background and obtain a TS/SCI Clearance.
• The primary work location will be at the Losee Road facility in North Las Vegas, Nevada.
• Work schedule will be 4/10s Monday through Thursday (subject to change).
• Pre-placement physical examination, which includes a drug screen, is required. MSTS maintains a substance abuse policy that includes random drug testing.
• Must possess a valid drivers license.

MSTS is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants offered employment with MSTS are also subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment. In addition, Applicants for employment must be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship, at least 18 years of age. Reference DOE Order 472.2, Personnel Security. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Department of Energy Q Clearance (position will be cleared to this level). Reviews and tests for the absence of any illegal drug as defined in 10 CFR Part 707.4, Workplace Substance Abuse Programs at DOE Sites, will be conducted. Applicant selected will be subject to a Federal background investigation, required to participate in subsequent reinvestigations, and must meet the eligibility requirements for access to classified matter. Successful completion of a counterintelligence evaluation, which may include a counterintelligence-scope polygraph examination, may also be required. Reference 10 CFR Part 709, Counterintelligence Evaluation Program.

MSTS is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status or other characteristics protected by law. MSTS is a background screening, drug-free workplace.

Annual salary range for this position is: $121, $194,126.40.

Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.