Cybersecurity Analyst / Information Systems Security Officer (ISSO)

Cybersecurity Analyst / Information Systems Security Officer (ISSO)KBR's National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country's most critical role – protecting our national security.Job Title: Cybersecurity Analyst / Information Systems Security Officer (ISSO)KBR is seeking a Cybersecurity Analyst / Information Systems Security Officer (ISSO) to join our team at Peterson SFB in Colorado Springs, CO. An active TS/SCI clearance is required.The individual will work in close coordination with current team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures. Duties may include but are not limited to:Perform activities to convert accreditation packages from DoDRMF Rev. 4 to Rev. 5Compiling and tracking vulnerabilities and mitigation results in quantifying program effectiveness, creating and maintaining vulnerability management policies, procedures and trainingApply security policies to meet security objectives of the systemApply updates, patches, and security technical implementation while maintaining control system performance and availability requirementsEstablish and maintain security configuration baseline for the control system(s), including IT components, interconnections, and interfacesImplement Risk Management Framework (RMF) Assessment requirements for control systems, and document/maintain records for themMaintain knowledge of the function and security of control system and IT technologies with which the control systems interfacePerform asset management and maintain inventory of control system devices and components through physical inspection or logical scansSupport risk assessments by reviewing and documenting the implementation status of security requirements of control systemsMitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representativeProvide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials)Reviewing and defining requirements for information security solutions, controls compliance and policy developmentOrganizing network-based scans to identify possible network security attacks and host-based scans to identify vulnerabilities in workstations, servers and other network hosts determining critical security flaws and figuring out how to fix themConduct audits and assessments focused on uncover vulnerabilities in the networks through scanning toolsAssist in improving and automating existing vulnerability management lifecycle including but not limited to data ingestion & normalization, compliance metrics and detections on assetsAssist in partnering with tools and technology teams to troubleshoot, develop, select, implement, and automate appropriate security solutions to keep system data protected from internal and external threatsAssist in providing support and resolution for scanning and vulnerability remediation reporting issuesAssist in working to effectively communicate the risks of identified vulnerabilities and make recommendations regarding the selection of cost-effective security controls to mitigate identified risks.Stay current with vulnerability information across all the products in the AVAC environmentWork as part of an integrated team to develop and maintain RMF body of evidence documentation using Enterprise Mission Assurance Support Service (eMASS), XACTA or equivalent productsMaintain repositories of all body of evidence documentation for systems under your purviewDevelop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activitiesEnsure all security-related vulnerabilities and deficiencies are documented in the Plan of Action and Milestones (POA&M) for each systemEnsure configuration management policies and procedures for authorizing use of hardware/software are followed and coordinate any system baseline changes with the appropriate stakeholders prior to changeAssisting with creating and maintaining RMF package documentation for multiple networksAdvise ISSM of compliance issues, findings and status related to the system packagesRequired Qualifications:Active TS/SCI clearance requiredDoD Directive (DoDD) 8140.01certification, Security+2+ years of related experienceWorking knowledge of DoDRMF Rev.4 and/or 5, cyber technologies, NIST standards and DISA STIG governanceMust have experience in the Agile Lifecycle to include, requirements, design, development, implementation, deployment and remediationExcellent technical document preparation and verbal communication skills are requiredStrong working knowledge of Confidentiality, Integrity, and Availability (CIA) concepts such as patch management, multi-factor authentication, host-based security, intrusion detection, security event management and defense-in-depthThis position requires strong analytical skills for known vulnerabilities and system complianceEffective interpersonal skills are required with a demonstrated ability to support complex organizational relationshipsDesired Qualifications:Bachelor's Degree (IT or Cybersecurity related) or equivalent related experienceGSEC, SCNP, SSCP, CISSP or higherExperience with RMF controls, eMASS or XACTA, risk assessment, Plan of Actions and Milestones (POAMs), policy and plans documentation, Information Assurance Vulnerability Management (IAVM) and vulnerability assessment for mission systemsWork Environment:Location: OnsiteWork Hours: StandardCompensation:For Colorado only, the salary range for this position is approximately $90,000 - $105,000. The offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity.Other Compensation:KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.KBR BenefitsKBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.Ready to Make a Difference?If you're excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together.Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.