Information Systems Security Officer (ISSO)

Title:

Information Systems Security Officer (ISSO)

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

• Innovative Projects: At KBR, you'll be working on cutting-edge projects that support the Department of the Air Force’s most mission-critical operations. Our team is pushing the boundaries of open-source development, DevSecOps with state-of-the-art CI/CD pipelines, containerization, Kubernetes, Terraform, Zarf, and innovative API management and database design. You'll be contributing to systems designed for a modeling and simulation SaaS platform that provides dynamic compute power, access to tools, and collaboration capability through a model that will revolutionize the future of military research and development.

• Collaborative Environment: Our team thrives in a dynamic, mission-driven environment where our employees work shoulder-to-shoulder with software engineers, DevSecOps architects, product leads, mission experts, and defense specialists. We embrace Agile methodologies and secure development practices to ensure rapid iteration, compliance alignment, and seamless integration across modular systems. Our culture prioritizes clarity, precision, and innovation—fostering open communication, iterative refinement, and deep collaboration to deliver software and documentation that’s not only compliant, but strategic and impactful across DoD.

• Impactful Work: Your work here will directly support the Department of the Air Force in advancing defense technology. You’ll be at the forefront of innovations, creating new paradigms for providing access to computer power, modeling and simulation tools, and data sharing across organizations to the Department of the Air Force and broader Department of Defense.

Role and Responsibilities:

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
• Perform Information Assurance and IT Security tasks to ensure the secure operation of the information systems
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. Including: process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.

Required Qualifications:

• Active TS/SCI Clearance
• Bachelor’s degree in computer, information systems management or related field from an accredited college or university or equivalent experience.
• 5+ years’ professional experience

• Experience with DOD 8500.01, Risk Management Framework (RMF) requirements as well as experience in drafting, submitting, and maintaining RMF packages,
• Experience in development and maintaining of RMF Documents including System Security Plans (SSP), System Security Checklists, Privacy Impact Assessments, and Authority to Operate (ATO) artifacts.

• Experience in developing Plan of Action and Milestones (POA&M)
• Knowledge of independent verification and validation techniques
• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.

Preferred Qualifications:

• IAM Level II (CAP, CASP, CISM, CISSP) or comparable certification in accordance with DoD 8570.01-M.
• Knowledge in monitoring and conducting Security Control Assessment to ensure all controls meet security requirements as stipulated in the SSP, NIST SP 800-53, JSIG.
• Experience in developing waivers and exceptions for information system vulnerabilities.
• Knowledge of quality assurance, quality control, and independent verification and validation techniques.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.