Information System Security Engineer (ISSE)

KBR, Inc. • Beavercreek, OH

86d

About The Position

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. The selected candidate will serve in a Senior ISSE role and perform tasks related to Assessment & Authorization (A&A) and cybersecurity under DHA to obtain and maintain Authorizations to Operate (ATOs) for assigned DoD medical systems (i.e., applications, networks, devices).

Requirements

• Bachelor’s Degree and fifteen (15) years of experience with Cybersecurity / Information Technology, or in lieu of a degree eighteen (18) years of hands-on experience with Cybersecurity / Information Technology
• An active TS/SCI clearance is required
• Must have experience working with Special Access Programs (SAPs)
• DoD 8570-compliant
• Demonstrated expert-level experience with Risk Management Framework RMF policy development, process improvement, and strategy implementation
• Demonstrated expert-level experience with DISA STIGs and SRGs
• Demonstrated efficiency and expert-level experience in RMF package development
• Experience with Assured Compliance Assessment Solution (ACAS)
• Experience in assessing systems using NIST 800-53, DISA STIGs/SRGs, and ACAS
• Deep familiarity and experience with the DoD tool eMASS
• Experience working within DoD (experience under DHA a plus)
• Excellent customer service and organization skills
• Excellent oral and written communication skills

Nice To Haves

• Experience working under DHA
• Experience with HBSS
• Knowledge in Continuous Monitoring and Risk Scoring (CMRS)
• Experience with Fortify, WebInspect, and/or AppDetective

Responsibilities

• Support team in a Senior ISSE capacity for multiple information systems
• Serve as Subject Matter Expert (SME) on one or more technologies/skills related to A&A activities
• Conduct risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs
• Provide solutions to complex problems that require the regular use of expertise and creativity
• Actively lead and participate in regular A&A status meetings with senior government and contract personnel
• Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity/RMF policies
• Maintain awareness and knowledge of evolving security and risk management standards
• Lead and/or attend meetings with SDD stakeholders to discuss statuses of efforts
• Assess system compliance against NIST, DoD, and DHA security requirements
• Produce evidence as necessary to support compliance status of NIST, DoD, and DHA security requirements
• Analyze vulnerability scans of information systems and assist in remediation tasks
• Submit weekly reports to DHA leadership regarding system/program status
• Develop, update, and/or review RMF documentation
• Coordinate with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories

Benefits

• 401K plan with company match
• Medical, dental, vision, life insurance, AD&D
• Flexible spending account
• Disability
• Paid time off
• Flexible work schedule
• Career advancement through professional training and development

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees