Cybersecurity Operations Lead

Trinzic; Washington (District of Columbia); Hybrid; USD 158.000 - 198.000; Vollzeit

Benefits dieser Stelle

401K with company match

Medical insurance

Paid time off

Zusammenfassung

KBR is seeking a Cybersecurity Operations Lead to join our team in the DC area. The role combines technical cybersecurity expertise with strong analytics, communication, and documentation skills to minimize risk and ensure timely responses to threats.

The position requires a Bachelor's degree in a related field and 2–5+ years in cybersecurity or SOC. It is a hybrid/remote role with primary duties across incident response, collaboration with IT and security teams, and continuous improvement of

Qualifikationen

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience.
• 2–5+ years of cybersecurity, SOC, incident response, or security operations experience.
• Familiarity with Windows, Linux, cloud platforms, and enterprise networking.

Aufgaben

• Incident Detection & Response: monitor, track, and log DCDC directives and incidents.
• Incident Documentation: maintain detailed incident records and create incident reports.
• Collaboration: coordinate with IT Operations, Service Desk, Infrastructure, Network, and Cloud teams.
• Continuous Improvement: contribute to playbooks, detection rules, and response procedures.
• Stay current with threats and industry best practices.

Kenntnisse

SIEM technologies

EDR/XDR platforms

Identity platforms

Networking

Ausbildung

Bachelor's degree in Cybersecurity/Information Security/CS/IT

Tools

Microsoft Defender

CrowdStrike

SentinelOne

Taegis

Active Directory

Entra ID

Jobbeschreibung

Title

Cybersecurity Operations Lead

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

KBR is seeking a Cybersecurity Operations Lead to join our team

The Security Operations Administrative Lead serves as the administrative nerve center for the TRMC Headquarter’s cyber defense and test environment posture. In this capacity, you will track, process, and ensure organizational compliance with all Department of Defense Cyber Defense Command (DCDC) directives , Tasking Orders (TASKORDs), and daily Cyber Tasking Orders (CTO) issued by USCYBERCOM.

The Security Operations Lead is responsible for managing a team of responders that aid in identifying, investigating, containing, and responding to cybersecurity incidents affecting the organization's systems, networks, cloud environments, and users.

The successful candidate will combine technical cybersecurity expertise with strong analytical, communication, and documentation skills to minimize risk and ensure timely response to cybersecurity threats.

Key Responsibilities

Incident Detection & Response

• Systematically monitor, receive, track, and log all DCDC-issued directives, including Operational Orders (OPORDs), Fragmentary Orders (FRAGOs), and TASKORDs as well as user or third-party reported incidents.
• Manage the administrative pipeline to ensure TRMC network/program elements report compliance status within mandated timeframes.
• Perform initial triage and analysis of suspicious events and potential security incidents.
• Determine incident severity, scope, and business impact.
• Contain security incidents through actions such as:
• Device isolation
• IP and domain blocking
• Escalate complex or high‑severity incidents to senior security personnel.

Incident Documentation

• Maintain detailed incident records and case documentation.
• Create incident reports detailing findings, actions taken, and business impact.
• Ensure evidence is collected, preserved, and documented appropriately.
• Participate in post-incident reviews and lessons-learned sessions.

Collaboration

• Coordinate with IT Operations, Service Desk, Infrastructure, Network, and Cloud teams during investigations.
• Support major incident response activities and virtual war room operations during significant security events.

Continuous Improvement

• Contribute to development of Cybersecurity Operations playbooks and response procedures.
• Recommend improvements to detection rules, monitoring coverage, and response workflows.
• Assist in threat hunting and security control validation activities.
• Stay current with emerging threats, vulnerabilities, and industry best practices.

Required Qualifications

Education

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience or,
• 2–5+ years of cybersecurity, SOC, incident response, or security operations experience.
• Familiarity with Windows, Linux, cloud platforms, and enterprise networking.

Technical Skills

Familiarity with

• SIEM technologies
• EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, Taegis, etc.)
• Identity platforms such as Active Directory and Entra ID
• Network protocols and traffic analysis

Preferred Certifications

• TS/SCI Required
• GCIH (GIAC Certified Incident Handler)
• GCIA
• GCFA
• CISSP
• Security+
• CySA+
• SC-200 (Microsoft Security Operations Analyst)

Working Conditions

• This position is hybrid/remote and will require regular classified network access.
• Support for major cybersecurity incidents outside normal business hours.
• Ability to manage multiple concurrent security investigations

Basic Compensation

$158,000 - $198,000 (For DC Only)

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Additional Compensation

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and foster an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.