DoD ISSO & RMF Specialist for Mission-Critical Systems

Trinzic; Beavercreek (OH); On-site; USD 110,000 - 170,000; Full time

Job summary

KBR is seeking an experienced Information System Security Officer (ISSO) to support secure development, authorization, operation, and maintenance of Department of War information systems. The ISSO will assess cybersecurity risks, validate controls, support RMF/ATO activities, and coordinate with engineering teams and government stakeholders.

The role involves preparing cybersecurity policies, maintaining assessment results, and ensuring compliance with DoD, NIST, and program-specific

Qualifications

• Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field.
• Demonstrated experience performing ISSO, cybersecurity analyst, information assurance, or equivalent responsibilities for DoD information systems.
• Practical experience with the DoD Risk Management Framework and Authority to Operate process.
• Working knowledge of DoD, Department of the Air Force, and NIST cybersecurity policies, controls, and guidance.
• Experience developing and maintaining RMF and authorization artifacts such as SSPs, SARs, RARs, POA&Ms, cybersecurity strategies, control traceability matrices, architecture analyses, and continuous monitoring documentation.
• Experience conducting security assessments, vulnerability reviews, risk analysis, control validation, and remediation tracking.
• Ability to communicate complex cybersecurity requirements clearly in written technical documentation and with technical, programmatic, and security stakeholders.
• Current DoD 8570/8140-compliant baseline certification appropriate to the position; Security+ CE or equivalent is acceptable subject to contract requirements.
• Ability to obtain and maintain a U.S. DoD security clearance

Responsibilities

• Support all phases of the DoD Risk Management Framework lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and update authorization and cybersecurity artifacts, including System Security Plans, Cybersecurity Strategies, Architecture Analysis Reports, Security Assessment Reports, Risk Assessment Reports, Security Controls Traceability Matrices, Continuous Monitoring Plans, vulnerability assessment reports, and Plans of Action and Milestones.
• Assess and mitigate cybersecurity threats and risks throughout the system and acquisition lifecycle.
• Conduct system security evaluations, vulnerability reviews, risk assessments, and security posture assessments to verify compliance with applicable DoD, Department of the Air Force, NIST, and program-specific requirements.
• Plan and support system certification and authorization activities, testing, liaison efforts, and Authority to Operate packages.
• Develop and update cybersecurity policies, procedures, guidance, and technical documentation supporting secure system operations and maintenance.
• Provide cybersecurity guidance to system development, test, integration, and sustainment environments.
• Review system architectures, technical drawings, requirements, and engineering documentation to identify cybersecurity gaps and recommend mitigations.
• Coordinate cybersecurity deliverables and adjudicate security requirements with technical teams, government stakeholders, assessors, security officials, and authorizing officials.
• Support secure operation of systems across SAP, SCI, Secret, and CUI environments, as applicable to the assigned program.
• Support vulnerability management, continuous monitoring, POA&M management, and remediation tracking.
• Facilitate cybersecurity working groups, technical interchange meetings, tabletop exercises, and cross-organizational engagements

Skills

RMF

DoD policies knowledge

Communication with stakeholders

Technical writing

Security clearance eligible

Education

Bachelor's degree in cybersecurity or related

Tools

eMASS

ITIPS

Job description

KBR is seeking an experienced Information System Security Officer (ISSO) to support secure development, authorization, operation, and maintenance of Department of War information systems. The ISSO will assess cybersecurity risks, validate controls, support RMF/ATO activities, and coordinate with engineering teams and government stakeholders.

The role involves preparing cybersecurity policies, maintaining assessment results, and ensuring compliance with DoD, NIST, and program-specific