Information System Security Officer (ISSO)

Trinzic; Colorado Springs (CO); On-site; USD 86,000 - 110,000; Full time

Job summary

KBR is seeking an Information System Security Officer (ISSO) in Colorado Springs to safeguard critical control systems and IT networks.

Responsibilities include applying patches, maintaining security baselines, RMF compliance, and supporting risk management activities using eMASS or XACTA. Candidates must have TS/SCI clearance and 2+ years of related experience, with a focus on NIST standards and DISA STIG governance.

Qualifications

• Active TS/SCI clearance required.
• DoD 8140.01 certification compliance and related certifications (Security+, GSEC, CISSP, etc).
• 2+ years of related experience in information security.
• Working knowledge of RMF Rev.4/5, Cyber technologies, NIST standards and DISA STIG governance.
• Analytical, strong written and verbal communication, and technical documentation skills for compliance assessments.
• Demonstrated ability to work effectively in a small team and support multiple responsibilities.

Responsibilities

• Apply updates, patches, and security configurations while maintaining system performance and availability.
• Establish and maintain security baselines for control systems and IT components.
• Maintain knowledge of control system and IT security interfaces.
• Support risk assessments by documenting implementation of security requirements.
• Mitigate deficiencies from security testing and advise on risk acceptance.
• Define requirements for security solutions, controls, and policy development.
• Collaborate with tools/tech teams to implement security solutions and protect data.
• Identify risks, recommend mitigations, and maintain POA&M for remediation.
• Develop control assessment procedures for RMF/audit activities.
• Ensure configuration management policies for hardware/software changes are followed.
• Conduct asset management, vulnerability assessments, and remediation support.
• Support RMF authorization with documentation and evidence packages (eMASS/XACTA).

Skills

Active TS/SCI clearance

DoD 8140.01 certifications

2+ years experience

RMF/NIST/DISA knowledge

Analytical/communication/documentation

Team collaboration

Education

Bachelor’s Degree in IT or Cybersecurity or related

Tools

eMASS

XACTA

POA&M tooling

Job description

Information System Security Officer (ISSO)

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Key Responsibilities

• Apply updates, patches, and security technical implementation while maintaining control system performance and availability requirements
• Establish and maintain security configuration baseline for the control system(s), including IT components, interconnections, and interfaces
• Maintain knowledge of the function and security of control system and IT technologies with which the control systems interface
• Support risk assessments by reviewing and documenting the implementation status of security requirements of control systems
• Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative
• Reviewing and defining requirements for information security solutions, controls compliance and policy development
• Assist in partnering with tools and technology teams to troubleshoot, develop, select, implement, and automate appropriate security solutions to keep system data protected from internal and external threats
• Identify and communicate security risks, recommend mitigating controls, and maintain POA&M documentation for vulnerability tracking and remediation
• Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities
• Ensure configuration management policies and procedures for authorizing use of hardware/software are followed and coordinate any system baseline changes with the appropriate stakeholders prior to change
• Conduct control system asset management, vulnerability assessments, and remediation support through inventory maintenance, security scanning, and reporting activities
• Support RMF authorization and compliance efforts through the development, maintenance, and assessment of security documentation, body of evidence artifacts, and system authorization packages using eMASS, XACTA, or equivalent tools

Required Qualifications

• Active TS/SCI clearance required
• DoD Directive (DoDD) 8140.01certification compliance, such as Security+ ,GSEC, Security+, SSCP, CISSP or similar
• 2+ years of related experience
• Working knowledge of DoDRMF Rev.4 and/or 5, Cyber technologies, NIST standards and DISA STIG governance
• Apply analytical, communication, and technical documentation skills to assess compliance, evaluate vulnerabilities, and support collaboration across complex organizational relationships.
• Demonstrated ability to work effectively within a small team environment, supporting a variety of responsibilities and contributing beyond primary job duties to meet team objectives.

Desired Qualifications

• Bachelor’s Degree (IT or Cybersecurity related) or equivalent related experience
• Experience with RMF controls, eMASS or XACTA, risk assessment, Plan of Actions and Milestones (POAMs), policy and plans documentation, Information Assurance Vulnerability Management (IAVM) and vulnerability assessment for mission systems

Basic Compensation

$86,000 – $110,000 annually (This range is for the CO area only)

The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

R3001116