Information Security Engineer - DoD RMF & Cloud Security

Trinzic; Lanham (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

KBR is seeking an Information System Security Engineer (ISSE) for an on-site role in Maryland to design, implement, and maintain enterprise security across Windows, Linux, cloud, and containerized environments at Annapolis Junction. You will drive vulnerability management, automation, and secure baselines while collaborating with ISSOs and system admins.

The position requires TS clearance with SCI, IAT Level III certification, hands-on experience with Nessus, CyberArk, Splunk, and Trellix, and a

Qualifications

• Top Secret clearance with SCI
• IAT Level III certification required (SecurityX/CASP, GCIH, CISA, CISSP)
• Strong networking, cloud security, and DevSecOps background
• Experience with Tenable Nessus, CyberArk, Splunk, VMware vSphere, and Linux environments
• Ability to produce security documentation and risk assessments

Responsibilities

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks
• Perform security engineering across SDLC including requirements analysis and accreditation support
• Implement vulnerability management using Nessus, ACAS, and Qualys
• Integrate cybersecurity into Windows/Linux, cloud, and containerized environments
• Support incident response and forensics with SIEM and endpoint telemetry analysis
• Develop automation scripts (PowerShell, Bash, Python) to streamline remediation and monitoring
• Collaborate with admins, ISSOs, and teams to remediate findings and baseline configs
• Conduct security impact analyses for changes and upgrades
• Engineer endpoint protection and hardening solutions (Trellix ePO, host-based firewalls)
• Evaluate cybersecurity tools to improve monitoring and threat detection
• Produce technical security docs and architecture diagrams
• Administer CyberArk components (EPV, PVWA, CPM, PSM)
• Monitor and detect cyber events with standard supervision
• Establish risk quantification framework for cyber risks
• Determine security requirements from business needs and standards
• Implement security systems and test scripts
• Maintain security compliance and provide training

Skills

Networking (TCP/IP, firewalls, VPNs)

Cloud security (AWS/Azure)

Kubernetes

DevSecOps

NIST RMF

DoD STIGs

Education

DoD 8570.1-M/8140 IAT Level III certification

Tools

Tenable Nessus

CyberArk

Trellix

Splunk Enterprise

VMware vSphere

GitLab

Windows Server

Red Hat Enterprise Linux

Ubuntu Linux

Job description

KBR is seeking an Information System Security Engineer (ISSE) for an on-site role in Maryland to design, implement, and maintain enterprise security across Windows, Linux, cloud, and containerized environments at Annapolis Junction. You will drive vulnerability management, automation, and secure baselines while collaborating with ISSOs and system admins.

The position requires TS clearance with SCI, IAT Level III certification, hands-on experience with Nessus, CyberArk, Splunk, and Trellix, and a