Cybersecurity Analyst & ISSO — RMF, Vulnerability Lead

KBR Careers; Colorado Springs (CO); On-site; USD 90,000 - 105,000; Full time

Job summary

KBR seeks a Cybersecurity Analyst / Information Systems Security Officer (ISSO) to join our Peterson SFB team in Colorado Springs, CO. An active TS/SCI clearance is required.

The role involves coordinating with the team to ensure systems are operated, maintained, and disposed of per security policies and RMF requirements, including vulnerability management, policy development, and risk assessment across control systems and IT networks.

Qualifications

• Active TS/SCI clearance is required.
• 2+ years of related experience.
• Experience with DoDRMF Rev.4/5 and NIST standards.
• Agile lifecycle experience from requirements to remediation.
• Strong technical documentation and verbal communication skills.
• Understanding CIA concepts: patch management, MFA, host-based security.

Responsibilities

• Convert accreditation packages using RMF methods.
• Track vulnerabilities and mitigation results; maintain policies and training.
• Apply security policies and updates to meet system objectives.
• Establish security baselines for control systems and IT components.
• Maintain RMF package documentation (eMASS, XACTA) and evidence.
• Support risk assessments and POAMs; communicate risk to leadership.
• Collaborate with tools/tech teams to implement security solutions.
• Produce vulnerability remediation reports and metrics.

Skills

TS/SCI clearance

DoD RMF

Security+

Agile lifecycle

technical documentation

CIA concepts

risk assessment

communication skills

Education

Bachelor’s Degree IT/Cybersecurity

GSEC/SCNP/SSCP/CISSP

Tools

RMF controls

eMASS

XACTA

Job description

KBR seeks a Cybersecurity Analyst / Information Systems Security Officer (ISSO) to join our Peterson SFB team in Colorado Springs, CO. An active TS/SCI clearance is required.

The role involves coordinating with the team to ensure systems are operated, maintained, and disposed of per security policies and RMF requirements, including vulnerability management, policy development, and risk assessment across control systems and IT networks.