Title:Information Systems Security Engineer (ISSE)
Key Responsibilities:- Design, implement, and integrate cybersecurity controls and information assurance solutions across network, computing, virtualization, cloud, and enclave environments.
- Lead and support Assessment & Authorization (A&A) activities, including development, review, and maintenance of RMF artifacts, accreditation documentation, standard operating procedures, and security plans.
- Conduct vulnerability assessments, compliance reviews, and security scans; coordinate remediation activities with system administrators and developers to resolve vulnerabilities, policy violations, and security findings.
- Review system architectures, network designs, and technical implementations to identify cybersecurity risks, recommend mitigation strategies, and ensure compliance with sponsor and regulatory requirements.
- Partner with ISSMs, system owners, and engineering teams to maintain secure system baselines, configuration management controls, continuous monitoring activities, and approved change management processes.
- Develop and maintain operational and cybersecurity documentation, including concepts of operation, operations and maintenance procedures, scan results, security event monitoring policies, and authorization evidence packages.
- Monitor, analyze, and respond to cybersecurity threats, vulnerabilities, and potential intrusion activity to protect systems and information from unauthorized access, disclosure, modification, or disruption.
Work Environment:- Location: On-site
- Travel Requirements: Minimal
- Working Hours: Standard
Qualifications:Required:- Active TS/SCI with a Polygraph
- Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related technical field and 8+ years of relevant experience. Additional experience may be substituted for a degree.
- Prior experience as an Information Systems Security Engineer (ISSE)
- Experience supporting Assessment & Authorization (A&A), Risk Management Framework (RMF), and cybersecurity compliance activities.
- Strong understanding of computer architecture, networking, operating systems, and network security principles.
- Experience conducting vulnerability assessments, security reviews, remediation activities, and continuous monitoring.
- Demonstrated ability to develop, review, and maintain cybersecurity documentation and accreditation artifacts.
Desired:- Experience with multi-enclave architectures and differing classification requirements.
- Professional cybersecurity certification such as CISSP, CASP+, Security+, GSLC, or equivalent.
- Experience supporting enterprise vulnerability management and configuration management programs.
- Experience working closely with ISSMs, network engineers, and system administrators to resolve cybersecurity findings.
Basic Compensation:$168,100 to $205,400
This range is for the VA area onlyThe offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity.
Additional Compensation:KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.
Ready to Make a Difference?If you're excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together.
KBR Benefits KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.
