Cyber System Security Engineer (CSSE)

Trinzic; El Segundo (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

KBR in El Segundo, CA is seeking a Cyber System Security Engineer (CSSE) to join our National Security Solutions team. You will integrate cybersecurity, systems security engineering, and RMF activities across the system life cycle for defense-critical systems and information networks.

Active TS/SCI clearance is required to be considered. You will lead RMF artifacts, support authorization decisions, and coordinate with ISSMs, AO, and program leadership to secure high-assurance defense

Qualifications

• Active TS/SCI clearance required.
• Experience with RMF and DoD cybersecurity requirements.
• Experience in defense systems engineering and space missions.

Responsibilities

• Apply systems security engineering across the SDLC per NIST SP 800-160.
• Translate requirements into system specs and test procedures.
• Manage RMF activities: registration, categorization, control selection, assessment, and authorization.
• Develop and maintain SSPs, SAPs, SARs, SCTMs and supporting evidence.
• Provide cybersecurity risk assessments and recommendations to ISSM, AO, program manager, and chief engineer.
• Participate in requirements, design, test-readiness, and deployment reviews.

Skills

RMF

NIST 800-160

Systems Security Eng

eMASS

RMF artifacts

Tools

eMASS

Job description

Title:

Cyber System Security Engineer (CSSE)

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

KBR is seeking a Cyber Security Engineer to join our team in El Segundo, CA. An active TS/SCI is required to be considered for this position.

Why Join Us?

Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.

Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.

Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

We are seeking an experienced Space Systems, Cyber System Security Engineer (SSE) to support the integration of cybersecurity, systems security engineering, information assurance, program protection, and risk-management activities for defense-critical systems and information-network environments.

The SSE will ensure cybersecurity is engineered throughout the system life cycle from requirements definition, architecture, design, integration, and test through deployment, authorization, sustainment, modernization, and disposal. The SSE will support systems pursuing and maintaining an Authority to Operate (ATO) through the Risk Management Framework (RMF) process.

The SSE serves as a principal cybersecurity and RMF Subject Matter Expert (SME) to the program manager, chief engineer, Information System Security Manager (ISSM), Information System Security Officer (ISSO), system owner, Authorizing Official (AO), configuration-control authorities, and program leadership.

Key Responsibilities

Systems Security Engineering and RMF

• Apply systems security engineering principles across the system development life cycle in accordance with NIST SP 800-160 and applicable DoD acquisition and cybersecurity requirements.

• Translate mission, cybersecurity, privacy, program-protection, cryptographic, supply-chain, and compliance requirements into system specifications, architecture artifacts, interface-control requirements, verification criteria, and test procedures.

• Responsible for RMF activities, including system registration, categorization support, control selection and tailoring, control implementation, assessment support, authorization-package development, risk response, and continuous monitoring.

• Develop, maintain, and update authorization artifacts in eMASS or other approved governance, risk, and compliance tools, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTMs), Contingency Plans, Configuration Management Plans, and supporting evidence.

• Provide technical cybersecurity risk assessments and recommendations to the ISSM, AO, program manager, and chief engineer regarding control deficiencies, residual risk, authorization dependencies, and risk-treatment options.

• Participate in technical and program reviews, including requirements reviews, design reviews, test-readiness reviews, production-readiness reviews, and deployment decisions.

SOW, CDRL, and Acquisition Support

• Draft, review, and maintain cybersecurity and systems-security-engineering requirements for Statements of Work (SOWs), Performance Work Statements (PWSs), Statements of Objectives (SOOs), task orders, and acquisition documentation.

• Develop and manage Contract Data Requirements List (CDRL) requirements for cybersecurity deliverables, including RMF packages, vulnerability reports, STIG checklists, cybersecurity test reports, software and firmware inventories, supply-chain documentation, and incident reports.

• Ensure cybersecurity requirements are measurable, traceable, technically feasible, and aligned with program milestones, acceptance criteria, engineering baselines, and sustainment requirements.

• Review contractor cybersecurity deliverables for completeness, technical adequacy, compliance, traceability, and readiness for government acceptance.

• Support acquisition planning and source-selection activities by identifying cybersecurity risks, engineering dependencies, resource needs, and compliance requirements.

Program Protection, Supply-Chain Risk, and Cryptography

• Support Program Protection Plan development and execution, including identification and mitigation of threats to critical technologies, mission-critical functions, hardware, software, interfaces, and data.

• Coordinate cybersecurity engineering with program protection, anti-tamper,