Cybersecurity Analyst

Trinzic; Beavercreek (OH); Vor Ort; USD 90.000 - 110.000; Vollzeit

Benefits dieser Stelle

401k plan with company match

Medical, dental, vision

Life insurance

AD&D

Flexible spending account

Paid time off

Flexible work schedule

Zusammenfassung

KBR is seeking a Cybersecurity Analyst to support the Air Force Research Laboratory’s Autonomous Air Refueling project. The role entails implementing and maintaining security controls per RMF, NIST 800-53/171, and DoD policy, and coordinating with system administrators and authorizing officials.

Location is on-site at WPAFB, OH with travel under 15%. Candidates should have a BS in a related field and 3+ years of experience, plus active Secret clearance; Security+ and Network+ are preferred.

Qualifikationen

• Bachelor’s degree in computer science, cybersecurity, or information technology or equivalent experience.
• 3+ years’ experience in a related field.
• Experience in developing Plan of Action and Milestones (POA&M).
• Knowledge of independent verification and validation techniques is required.
• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.
• CompTIA Security+, CompTIA Network+.
• Active Secret clearance

Aufgaben

• Works with CRONUS ISSM to ensure systems are properly configured, patched, monitored, and documented.
• Implements security governance, Cybersecurity coordination, planning and implementation.
• Supports the ISSM for all program Cyber-related Flight Test authorizations; reviews Flight Test Plans, attends required meetings.
• Manage security artifacts such as the Security Classification Guide (SCG), Communications Plan, Science and Technology Protection Plan (S&TPP), POA&M and incident reports.
• Execute review of security CDRL Deliverables i.e. OPSEC Plan, Security Plan, Research & Related Annual Report
• Coordinates and assesses implementation of controls and POA&M timelines for compliance.
• Enforces CUI handling, develop and updates program DD254 as needed, program visit requests, and access controls.
• Supports the hands-on testing activities with Air Refueling Battle Management, Air Refueling Mission Computer, Software in the Loop/Hardware in the Loop configuration and cyber implementation, flight tests, digital tools integrations, and hands-on testing activities.
• Implement and coordinate overarching program level plans, policies and procedures: i.e. Continuous Monitoring and execution.
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.

Kenntnisse

POA&M development

RMF & NIST controls

Independent verification & validation

Analytical research skills

Team collaboration

Ausbildung

Bachelor’s degree in computer science, cybersecurity, or information technology

Tools

CompTIA Security+

CompTIA Network+

Jobbeschreibung

Title

Cybersecurity Analyst

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Position Summary

KBR is seeking a Cybersecurity Analyst to support the Air Force Research Laboratory’s Autonomous Air Refueling research effort. The Cybersecurity Analyst is the day-to-day steward of an information system’s cybersecurity posture, responsible for implementing and maintaining security controls in accordance with RMF, NIST 800-53/171, and DoD policy. The candidate will support continuous monitoring and vulnerability remediation and serve as the primary liaison between system administrators, users, and the authorizing community to ensure the system remains compliant, defensible, and authorization-ready throughout its lifecycle.

Key Responsibilities

• Works with CRONUS ISSM to ensure systems are properly configured, patched, monitored, and documented.
• Implements security governance, Cybersecurity coordination, planning and implementation.
• Supports the ISSM for all program Cyber-related Flight Test authorizations; reviews Flight Test Plans, attends required meetings.
• Manage security artifacts such as the Security Classification Guide (SCG), Communications Plan, Science and Technology Protection Plan (S&TPP), POA&M and incident reports.
• Execute review of security CDRL Deliverables i.e. OPSEC Plan, Security Plan, Research & Related Annual Report
• Coordinates and assesses implementation of controls and POA&M timelines for compliance.
• Enforces CUI handling, develop and updates program DD254 as needed, program visit requests, and access controls.
• Supports the hands-on testing activities with Air Refueling Battle Management, Air Refueling Mission Computer, Software in the Loop/Hardware in the Loop configuration and cyber implementation, flight tests, digital tools integrations, and hands-on testing activities.
• Implement and coordinate overarching program level plans, policies and procedures: i.e. Continuous Monitoring and execution.
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts a review of each system's audits and monitors corrective actions until all actions are closed.

Work Environment

• Location: On-site (WPAFB, OH)
• Travel Requirements: Less than 15%
• Working Hours: Standard - Core hours 0900 - 1500

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or information technology or a related field from an accredited college or university or equivalent experience.
• 3+ years’ experience in a related field
• Experience in developing Plan of Action and Milestones (POA&M)
• Knowledge of independent verification and validation techniques is required.
• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.
• CompTIA Security+, CompTIA Network+
• Active Secret clearance

Desired

• Active Top Secret clearance
• CySA+, CISSP, CISM
• Knowledge in monitoring and conducting Security Control Assessment to ensure all controls meet security requirements as stipulated in the SSP, NIST SP 800-53, JSIG.
• Understanding of maintenance and inventory process for information Security Systems.
• Experience in coordinating with Leadership across the organization to ensure timely compliance.
• Experience in developing waivers and exceptions for information system vulnerabilities.
• Knowledge of quality assurance, quality control, independent verification and validation techniques.
• Experience working in a corporate environment and working with a diverse user population and a global enterprise.

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

R3000921