Senior Information Systems Security Officer (ISSO)

KBR • Shreveport, LA

12d • Onsite

About The Position

The Senior Information Systems Security Officer (ISSO) will perform Assessment and Authorization (A&A) and cybersecurity work to obtain and maintain Authorizations to Operate (ATOs) for information systems—including applications, networks, and devices—supporting the 8 AF Strategic Air Operations Center (StAOC). The role is based at Barksdale AFB, Louisiana, and supports the 8 AF Information Security team and 8 AF and AFGSC information systems. It is tied to the StAOC contract.

The ISSO will assess systems and networks in networking environments or enclaves for deviations from acceptable configurations, enclave policy, and local policy. Assessments include passive compliance audits and active vulnerability assessments. The position also establishes program control processes to mitigate risks and support system certification and accreditation, applies relevant government cybersecurity policies, validates security requirements, recommends safeguards, and monitors corrective actions through closure.

Requirements

• Bachelor’s degree in computer science, information systems management, or a related field from an accredited college or university, or equivalent experience.
• Four years of experience as an ISSO.
• Experience with DoD 8500.01 and Risk Management Framework (RMF) requirements, including drafting, submitting, and maintaining RMF packages.
• Experience with Joint Special Access Program (SAP) Implementation Guide (JSIG) packages.
• Experience developing and maintaining RMF documents in eMASS, including System Security Plans, System Security Checklists, Privacy Impact Assessments, and ATO artifacts.
• Experience developing Plans of Action and Milestones (POA&Ms).
• Knowledge of independent verification and validation techniques.
• Ability to work independently and as part of a team to research data and develop analytical techniques and methodologies.
• Current Information Assurance Manager (IAM) Level I certification (CAP or Security+ CE) or comparable certification under DoD 8570.01-M.
• Current Top Secret clearance with SCI eligibility, or a background investigation completed within the last six months.

Nice To Haves

• IAM Level II certification (CAP, CASP, CISM, CISSP) or comparable certification under DoD 8570.01-M.
• Experience with JSIG, ICD 503, SCI security controls, and Cross Domain Solution requirements.
• Knowledge of monitoring and conducting Security Control Assessments to ensure controls meet requirements specified in the SSP, NIST SP 800-53, and JSIG.
• Understanding of information security systems maintenance and inventory processes.
• Experience coordinating with organizational leadership to ensure timely compliance.
• Experience developing waivers and exceptions for information system vulnerabilities.
• Knowledge of quality assurance, quality control, and independent verification and validation techniques.
• Experience in a corporate environment, supporting a diverse user population and a global enterprise.

Responsibilities

• Serve as an ISSO at Barksdale AFB, working with the 8 AF GSSO to support 8 AF and AFGSC information systems.
• Conduct passive compliance audits and active vulnerability assessments of systems and networks, identifying deviations from approved configurations and policies.
• Perform information assurance and IT security tasks to help ensure secure operation of StAOC information systems.
• Establish program control processes to mitigate risks and support system certification and accreditation.
• Provide process, analysis, coordination, security certification test, and security documentation support.
• Support investigations, software research, hardware introduction and release, emerging technology research, inspections, and periodic audits.
• Assist with implementing government policies, including JSIG, NISPOM, SP-800-171, SP-800-53, and RMF, and recommend process tailoring.
• Analyze and validate established security requirements and recommend additional requirements and safeguards.
• Periodically review system audits and monitor corrective actions until they are closed.
• Develop and maintain RMF documentation in eMASS, including System Security Plans, System Security Checklists, Privacy Impact Assessments, and ATO artifacts.
• Develop Plans of Action and Milestones (POA&Ms).

Benefits

• KBR may offer a 401(k) plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability benefits, paid time off, or a flexible work schedule.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior