Cybersecurity Practitioner

KBR Careers; Oklahoma City (OK); On-site; USD 85,000 - 120,000; Full time

Job summary

KBR seeks a Cybersecurity Practitioner to evaluate third-party software, perform risk assessments for IT and OT systems, and drive secure coding practices across development teams. The role includes static/dynamic analysis, reverse engineering, and developing tools to monitor security metrics and CONMON artifacts.

Applicants should have 3+ years in software/cybersecurity, familiarity with secure coding and risk management, and be eligible for high‑level security clearances.

Qualifications

• The position requires at least three (3) years of experience in software engineering, software development or a cybersecurity-related field.
• Understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six months, possess or obtain certifications such as CySA+, CGRC, Security+, CISSP, SSCP, or CSSLP.
• Familiarity with secure coding and cybersecurity practices and ability to obtain/maintain a security clearance.

Responsibilities

• Evaluate third‑party software deliverables and assess technical compliance reports.
• Support RMF activities to assess, authorize, and monitor system risks for IT/OT environments.
• Perform SAST on source code and static binary analysis on executables.
• Reverse engineer software to identify flaws and undocumented objects.
• Develop and maintain custom software utilities to collect system information and generate CONMON artifacts.

Skills

Software development

Software assurance

Risk management

SAST

Reverse engineering

DEVSECOPS

Secure coding

Threat analysis

Vulnerability hunting

Education

Bachelor’s degree in Computer Science/Engineering

Tools

Ghidra

Binwalk

JTAG

UART

I2C

Job description

Cybersecurity Practitioner

KBR is seeking a Cybersecurity practitioner with experience in software development, software assurance, and risk management to evaluate and verify third-party software deliverables, assess technical compliance reports, and provide risk-mitigation recommendations for Information Technology (IT) and Operational Technology (OT) systems. The successful candidate will join a team that evaluates cybersecurity policies and implements the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to assess, authorize, and monitor system risks and ultimately ensure mission success for the customer. The successful candidate will conduct Static Application Security Testing (SAST) on source code and static binary analysis on compiled executables, assess scan reports to identify software weaknesses and prioritize mitigation plans, and maintain various security testing tools. The successful candidate will reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects. The successful candidate will leverage expertise in Development, Security, and Operations (DEVSECOPS) and secure coding practices to provide technical support that effectively directs system security engineering for acquisition and sustainment programs. The successful candidate will develop and maintain custom software utilities to gather computer system information, consolidate logs and Security Content Automation Protocol (SCAP) results, generate visual metrics, and produce Continuous Monitoring (CONMON) artifacts.

REQUIREMENTS

• The position requires at least three (3) years of experience in software engineering, software development or a cybersecurity-related field.
• Candidates must demonstrate an understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies.
• Within six (6) months of the assignment, the candidate must possess or obtain one of the following certifications: CySA+, CGRC (formerly CAP), Security+, CISSP, SSCP, or CSSLP.
• The candidate must be familiar with secure coding and cybersecurity practices.
• Additionally, the candidate must be able to obtain and maintain a Secret or Top-Secret security clearance.

PREFERRED

• A bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity, and at least five (5) years of experience in related engineering or cybersecurity positions.
• Desired qualifications include hands-on experience with ICSSCADA systems, vulnerability hunting, threat analysis, software reverse engineering, Ghidra, Binwalk, hardware debugging interfaces (e.g., JTAG, UART, I2C).
• Possession of one of the following certifications: CDP, CDE, CEH, CASE, GREM, or GICSP.
• Direct experience supporting USAF, military service, or military weapon systems is highly preferred.
• Must possess an active Secret or Top-Secret security clearance.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow.

We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

KBR - Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives.

In everything we do, we are guided by our ONE KBR Values: We Value Our People - We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

We Deliver - We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

We Are People of Integrity - We value honesty, trust, courage, fairness, prudence and tenacity. We believe doing what’s right for the planet, the communities where we work, and our people is good for business.

We Empower - We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.

We Are a Team of Teams - We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments. Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries. At KBR, We Deliver.