Cybersecurity Engineering Manager

KBR, Inc.•Colorado Springs, CO

2d•Onsite

About The Position

Cybersecurity Engineering Manager Title: Cybersecurity Engineering Manager Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. Our KBR team in Colorado Springs, CO is seeking a Cybersecurity Engineering Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve. Key Responsibilities: Securing enterprise network boundaries by managing firewalls, enforcing strict access management, and monitoring high-volume data traffic for anomalies Performing analysis at all levels of the lifecycle, ensuring security posture is maintained from initial conceptualization through decommissioning Using encryption technology, penetration and vulnerability analysis of various security technologies, and conducting information technology security research Helping to direct end-to-end security operations that may include Risk Management Framework (RMF) Assessment & Authorization (A&A) Supporting Certificate to Field (CtF) activities Incident Response (IR) Disaster Recovery (DR) System hardening Defining security requirements Vulnerability scanning, research and testing Providing analytical support for development of the system security policy Modernizing legacy infrastructures by integrating cloud native architecture and Zero Trust security features Making changes to security blueprints and artifacts Providing architectural analysis of cyber security features and relating existing system to future needs and trends Embedding advanced forensic tools and techniques for attack reconstruction Providing engineering recommendations, and resolving integration and testing issues Analyzing and solving complex problems, which may include taking new perspectives to identify and recommend solutions/best practices May be required to advise multi-disciplinary teams or run projects Work Environment: Location: On Customer Site Travel Requirements: Minimal Working Hours: Flexible Qualifications: Required: Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain Ability to obtain and maintain a JWICS, SAP/SAR clearance Education: BS/BA in a related field 7-9 years of experience Tertiary qualification in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical discipline DODM 8140.03 Cybersecurity Certification (Security+, CEH, CISSP, CISM, C|CISO, etc) Minimum 7–9 years’ experience in cybersecurity engineering, assurance, or governance within the Defense sector or another highly regulated technical environment. Demonstrated knowledge and practical application of Defense and international cybersecurity standards and frameworks Proven experience leading or contributing to cybersecurity risk assessments, security design reviews, and system accreditation activities under Defense security frameworks Strong understanding of secure system architectures, information assurance principles, and cyber risk management across the system lifecycle Proficiency with cybersecurity management and monitoring tools such as SIEM, vulnerability management platforms, endpoint detection and response, and secure configuration baselines Demonstrated knowledge in architecting and managing the Risk Management Framework (RMF) lifecycle, including the authoring and execution of System Security Plans (SSPs) and mission-critical documentation (ISSMP, CCR, SRMP) to secure formal Authorization to Operate (ATO) for Defense programs Strong analytical, organizational, and communication skills, with the ability to collaborate effectively across engineering, program management, and customer security teams Strong problem-solving skills Experience with ATO process and procedures Excellent written and verbal communication skills, with the ability to articulate risk posture, trends, and recommendations to diverse audiences Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies Experience working with version control systems like Gitlab, Jira and Confluence Desired: Experience in Defense acquisition and sustainment programs across the capability lifecycle, with emphasis on cyber and information assurance requirements Knowledge of the Australian Government Information Security Manual (ISM), DISP cyber security controls, and international standards such as ISO/IEC 27001 and NIST SP 800-171 Experience leading or mentoring cybersecurity professionals, engineers, or small teams in secure system design, implementation, and assessment Familiarity with digital engineering environments, secure system architectures, and integration of cybersecurity with model-based systems engineering (MBSE) frameworks Experience in assessing, implementing, and continuously improving cybersecurity controls, monitoring systems, and risk management processes within Defense or critical infrastructure systems Exposure to contract, accreditation, and compliance management, including reporting to Commonwealth, Prime, or international Defense clients on cybersecurity assurance and risk posture Basic Compensation: $147,900 - $221,800 (Salary Range for Colorado Springs Only) The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity. Additional Compensation: KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of a sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance. Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law. KBR — Delivering Solutions, Changing the World. KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives. In everything we do, we are guided by our ONE KBR Values: We Value Our People – We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential. We Deliver – We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders. We Are People of Integrity – We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business. We Empower – We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed. We Are a Team of Teams – We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company. We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals. Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver. Fraud Alert Fraud has infiltrated the job placement market via the internet, email and direct phone contact. Attempts have included unauthorized use of KBR’s name and logo to solicit potential job seekers or to extend false job offers. Bad actors may mix in fake job advertisements with legitimate postings. These ads can include contact instructions and require job seekers to send sensitive personal information or money to pay for visa applications, processing fees, etc., in exchange for consideration for a high-paying position. KBR will never ask for any sort of advance payment as part of the recruiting/hiring process. Candidate profiles are carefully managed to protect personal information.

Requirements

Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain
Ability to obtain and maintain a JWICS, SAP/SAR clearance
BS/BA in a related field
7-9 years of experience
Tertiary qualification in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical discipline
DODM 8140.03 Cybersecurity Certification (Security+, CEH, CISSP, CISM, C|CISO, etc)
Minimum 7–9 years’ experience in cybersecurity engineering, assurance, or governance within the Defense sector or another highly regulated technical environment.
Demonstrated knowledge and practical application of Defense and international cybersecurity standards and frameworks
Proven experience leading or contributing to cybersecurity risk assessments, security design reviews, and system accreditation activities under Defense security frameworks
Strong understanding of secure system architectures, information assurance principles, and cyber risk management across the system lifecycle
Proficiency with cybersecurity management and monitoring tools such as SIEM, vulnerability management platforms, endpoint detection and response, and secure configuration baselines
Demonstrated knowledge in architecting and managing the Risk Management Framework (RMF) lifecycle, including the authoring and execution of System Security Plans (SSPs) and mission-critical documentation (ISSMP, CCR, SRMP) to secure formal Authorization to Operate (ATO) for Defense programs
Strong analytical, organizational, and communication skills, with the ability to collaborate effectively across engineering, program management, and customer security teams
Strong problem-solving skills
Experience with ATO process and procedures
Excellent written and verbal communication skills, with the ability to articulate risk posture, trends, and recommendations to diverse audiences
Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies
Experience working with version control systems like Gitlab, Jira and Confluence

Nice To Haves

Experience in Defense acquisition and sustainment programs across the capability lifecycle, with emphasis on cyber and information assurance requirements
Knowledge of the Australian Government Information Security Manual (ISM), DISP cyber security controls, and international standards such as ISO/IEC 27001 and NIST SP 800-171
Experience leading or mentoring cybersecurity professionals, engineers, or small teams in secure system design, implementation, and assessment
Familiarity with digital engineering environments, secure system architectures, and integration of cybersecurity with model-based systems engineering (MBSE) frameworks
Experience in assessing, implementing, and continuously improving cybersecurity controls, monitoring systems, and risk management processes within Defense or critical infrastructure systems
Exposure to contract, accreditation, and compliance management, including reporting to Commonwealth, Prime, or international Defense clients on cybersecurity assurance and risk posture

Responsibilities

Securing enterprise network boundaries by managing firewalls, enforcing strict access management, and monitoring high-volume data traffic for anomalies
Performing analysis at all levels of the lifecycle, ensuring security posture is maintained from initial conceptualization through decommissioning
Using encryption technology, penetration and vulnerability analysis of various security technologies, and conducting information technology security research
Helping to direct end-to-end security operations that may include Risk Management Framework (RMF) Assessment & Authorization (A&A)
Supporting Certificate to Field (CtF) activities Incident Response (IR) Disaster Recovery (DR) System hardening
Defining security requirements
Vulnerability scanning, research and testing
Providing analytical support for development of the system security policy
Modernizing legacy infrastructures by integrating cloud native architecture and Zero Trust security features
Making changes to security blueprints and artifacts
Providing architectural analysis of cyber security features and relating existing system to future needs and trends
Embedding advanced forensic tools and techniques for attack reconstruction
Providing engineering recommendations, and resolving integration and testing issues
Analyzing and solving complex problems, which may include taking new perspectives to identify and recommend solutions/best practices
May be required to advise multi-disciplinary teams or run projects