Lead Information Systems Security Engineer (ISSE)

:

Title:

Lead Information Systems Security Engineer (ISSE)

Title:

Information System Security Engineer

Position Summary:

KBR is seeking an Information System Security Engineer (ISSE) to support the United States Space Force's (USSF) Satellite Control Network (SCN). The SCN provides highly reliable and secure data transfer, telemetry, tracking, command, control, and communications (TT&C3) for more than 195 Department of Defense (DoD), National Reconnaissance Office (NRO), civil, and allied satellites.

Duties and Responsibilities:

The Information System Security Engineer (ISSE) is responsible for applying and maintaining secure configurations for COTS/GOTS hardware and software components, including those within cloud-based environments, and within satellite ground systems to meet Risk Management Framework (RMF) requirements. The ISSE will research and evaluate cyber capabilities and new security products against operational requirements and introduce them to systems in alignment with organizational configuration management procedures. They will deploy and operate cyber infrastructure components, including but not limited to ACAS, HBSS/ESS, Vulnerator, LogRhythm, Fortify, Elastic, and other relevant products and tools to achieve and maintain system security requirements. The ISSE will develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities. This position is contingent on contract award.

Work Location:

Colorado Springs, CO - Hybrid

Primary Responsibilities:

• You will coordinate with the ISSM and ISSOs, as well as government staff and mission partners, to implement and maintain security controls to ensure systems achieve and maintain Authorization to Operate (ATO).
• Develop, update, and/or review RMF documentation to include Security Plans, Implementation Plans, Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports.
• Assess system compliance against NIST, DoD, and IC security requirements to include the NIST 800-53 and 800-171 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Provide system threat modeling evaluations to guide security strategies, policy, and procedures.
• Devise, implement, and test solutions to complex problems that require the regular use of expertise and creativity.
• Provide technical level Subject Matter Expert (SME) knowledge on matters related to RMF activities across various systems and networks.
• Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity policies.
• Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes.
• Advise the ISSM/ISSOs on the technical implementation of security policies, procedures, and guidelines in accordance with industry best practices and regulatory requirements.
• Stay up-to-date with the latest cybersecurity trends, threats, and technologies.
• Collaborate with cross-functional teams to ensure the security of new and existing systems and applications.
• Lead or attend technical meetings with system stakeholders to discuss statuses of efforts.

Security Clearance:

• Active DoD Secret security clearance with TS/SCI eligibility

Basic Qualifications:

• Bachelor's Degree in computer science, information systems or related field and at least five (5) years of relevant work experience in cybersecurity, or ten (10) years of cybersecurity experience in lieu of a B.S.
• Minimum of five (5) years of experience performing ISSE or ISSO duties in DoD classified environments
• DoD 8570-compliant IAT Level III certification (CISSP preferred)
• Experience with designing and configuring cloud environments (e.g. AWS, Azure)
• Demonstrated experience with Risk Management Framework
• Familiarity and experience with tools such as eMASS, ACAS, SCAP, Fortify, Elastic, and LogRhythm
• Deep working knowledge of Linux and Windows OS environments
• Understanding of security architectures and their impact on system environments
• Understanding of security automation and it's implementation
• Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs
• Excellent oral and written communication skills

Basic Compensation: $111,300.00 - $166,845.00

The offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation:

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

Benefits:

KBR offers a selection of competitive lifestyle benefits which could include a 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.