Information Systems Security Engineer (ISSE)

KBR, Inc.•Vienna, VA

1d•$168,100 - $205,400•Onsite

About The Position

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions. Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace. Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

Requirements

Active TS/SCI with a Polygraph
Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related technical field and 8+ years of relevant experience. Additional experience may be substituted for a degree.
Prior experience as an Information Systems Security Engineer (ISSE)
Experience supporting Assessment & Authorization (A&A), Risk Management Framework (RMF), and cybersecurity compliance activities.
Strong understanding of computer architecture, networking, operating systems, and network security principles.
Experience conducting vulnerability assessments, security reviews, remediation activities, and continuous monitoring.
Demonstrated ability to develop, review, and maintain cybersecurity documentation and accreditation artifacts.

Nice To Haves

Experience with multi-enclave architectures and differing classification requirements.
Professional cybersecurity certification such as CISSP, CASP+, Security+, GSLC, or equivalent.
Experience supporting enterprise vulnerability management and configuration management programs.
Experience working closely with ISSMs, network engineers, and system administrators to resolve cybersecurity findings.

Responsibilities

Design, implement, and integrate cybersecurity controls and information assurance solutions across network, computing, virtualization, cloud, and enclave environments.
Lead and support Assessment & Authorization (A&A) activities, including development, review, and maintenance of RMF artifacts, accreditation documentation, standard operating procedures, and security plans.
Conduct vulnerability assessments, compliance reviews, and security scans; coordinate remediation activities with system administrators and developers to resolve vulnerabilities, policy violations, and security findings.
Review system architectures, network designs, and technical implementations to identify cybersecurity risks, recommend mitigation strategies, and ensure compliance with sponsor and regulatory requirements.
Partner with ISSMs, system owners, and engineering teams to maintain secure system baselines, configuration management controls, continuous monitoring activities, and approved change management processes.
Develop and maintain operational and cybersecurity documentation, including concepts of operation, operations and maintenance procedures, scan results, security event monitoring policies, and authorization evidence packages.
Monitor, analyze, and respond to cybersecurity threats, vulnerabilities, and potential intrusion activity to protect systems and information from unauthorized access, disclosure, modification, or disruption.