DoD Information Security Engineer (ISSE) – TS/SCI

kbr; Maryland; On-site; USD 110,000 - 140,000; Full time

Job summary

KBR seeks an Information System Security Engineer (ISSE) in Annapolis Junction, MD to design, implement, and sustain enterprise security aligned with DoD RMF, NIST, and CIS benchmarks. You will support SDLC activities, vulnerability management, and security integration across Windows, Linux, cloud, and containers.

The role requires TS clearance with SCI, IAT Level III certification, and hands-on experience with Nessus, CyberArk, Splunk, and Trellix.

Qualifications

• Top Secret clearance with SCI
• IAT Level III certification (SecurityX/CASP, GCIH, CISA, CISSP) required
• Strong networking, cloud security, Kubernetes, and DevSecOps background
• Hands-on experience with Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Windows Server and Linux
• Scripting with Powershell, Python, Bash, Ansible; proven leadership and briefing skills

Responsibilities

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks and policies
• Perform security engineering across SDLC including requirements analysis, design reviews, testing, and accreditation
• Manage vulnerabilities using Nessus, ACAS, and Qualys to identify and remediate issues
• Integrate security into Windows, Linux, cloud, virtualization, and container environments
• Support incident response and forensics using Splunk Enterprise and related tools
• Develop automation scripts in PowerShell, Bash, and Python to streamline remediation and monitoring
• Collaborate with admins, engineers, ISSOs, and app teams to remediate findings and implement baselines
• Perform security impact analyses for changes and upgrades to ensure ongoing compliance
• Engineer endpoint protection and hardening with Trellix ePO, firewalls, and whitelisting
• Evaluate cybersecurity tools to improve posture and continuous monitoring
• Produce security documentation, architecture diagrams, and risk assessments
• Experience with CyberArk EPV, PVWA, CPM, and PSM configurations
• Monitor for cyber events and maintain continuous monitoring programs
• Establish a measurable cyber risk framework and communicate findings

Skills

Networking

Cloud security

Kubernetes

DevSecOps

Scripting

Leadership

Technical briefings

Education

DoD 8570.1-M/8140 IAT Level III certification

Tools

Tenable Nessus

CyberArk

Trellix

Splunk Enterprise

VMware vSphere

GitLab

Windows Server

RHEL

Ubuntu Linux

Job description

KBR seeks an Information System Security Engineer (ISSE) in Annapolis Junction, MD to design, implement, and sustain enterprise security aligned with DoD RMF, NIST, and CIS benchmarks. You will support SDLC activities, vulnerability management, and security integration across Windows, Linux, cloud, and containers.

The role requires TS clearance with SCI, IAT Level III certification, and hands-on experience with Nessus, CyberArk, Splunk, and Trellix.