Sr. IT Security Analyst

KBR, Inc.•North Charleston, SC

2d•Hybrid

About The Position

KBR is seeking to hire a Sr. IT Security Analyst to support a US Government customer. This position is located in North Charleston, SC. The candidate plays a critical role in the assessment and authorization of existing or new systems. One of the primary responsibilities of this position will be to collaborate with system administrators in assessing the security posture of systems assigned to the candidate throughout the risk management framework (RMF) lifecycle (accreditations, annual reviews, risk assessments, and continuous monitoring activities). The candidate will be essential in interacting with all team members to ensure a comprehensive accreditation package is maintained. This position will require a high degree of self-motivation and organization.

Requirements

Secret required. Completed SSBI/T5 investigation (preferred and required to fulfill complete duties)
BS degree and ten (10) years of experience in computer science, information technology or a related field. In lieu of degree, additional eight (8) years combination of related training and experience can be substituted.

Nice To Haves

Experience with RMF and security compliance frameworks such as NIST 800-53, HIPAA, FISMA, or ISO 27001.
Knowledge of security controls, risk assessment, and vulnerability management.
Experience working with IT and security teams to implement security controls and procedures.
Strong analytical skills and attention to detail.
Excellent communication and interpersonal skills

Responsibilities

Review and analyze RMF packages for information systems, applications, and processes.
Evaluate security controls to ensure compliance with security standards and regulations, such as NIST 800-53, HIPAA, and FISMA.
Provide guidance to IT and security teams on the implementation of security controls and procedures.
Identify and communicate risks and vulnerabilities to stakeholders and recommend appropriate mitigation strategies.
Participate in the development and implementation of policies and procedures related to risk management and compliance.
Create and maintain all authorization documentation ensuring it is complete, accurate, and up-to-date.