Information Systems Security Officer (ISSO)

KBR Careers; Beavercreek (OH); On-site; USD 120,000 - 150,000; Full time

Job summary

KBR's National Security Solutions team is seeking an Information Systems Security Officer (ISSO) in Beavercreek, Ohio. The ISSO will perform assessments, ensure secure operation, and support RMF and government policy implementation for DoD systems.

You will develop and maintain RMF artifacts such as SSPs and ATOs, collaborate with engineers and mission experts, and help advance secure, compliant software development practices in Agile environments.

Qualifications

• Active TS/SCI clearance required.
• Bachelor's degree in computer information systems management or related field.
• 5+ years of professional experience in information systems security.
• Experience with RMF and DoD 8500.01.
• Experience drafting and maintaining RMF artifacts like SSP and ATO artifacts.

Responsibilities

• Perform assessments of systems and networks to verify configurations against policies and RMF.
• Conduct Information Assurance and IT Security tasks to ensure secure operation.
• Support government policy implementation (JSIG, NIST RMF) for site-hosted systems.
• Develop and maintain RMF documents including SSP, System Security Checklists, PIA, and ATO artifacts.
• Develop POA&M and track corrective actions until closure.

Skills

TS/SCI Clearance

RMF familiarity

IV&V techniques

Education

Bachelor’s degree in computer information systems management or related field

Tools

System Security Plans (SSP)

POA&M

RMF documentation

Job description

Information Systems Security Officer (ISSO)

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

• Innovative Projects: At KBR, you'll be working on cutting-edge projects that support the Department of the Air Force’s most mission-critical operations. Our team is pushing the boundaries of open-source development, DevSecOps with state-of-the-art CI/CD pipelines, containerization, Kubernetes, Terraform, Zarf, and innovative API management and database design. You'll be contributing to systems designed for a modeling and simulation SaaS platform that provides dynamic compute power, access to tools, and collaboration capability through a model that will revolutionize the future of military research and development.
• Collaborative Environment: Our team thrives in a dynamic, mission-driven environment where our employees work shoulder-to-shoulder with software engineers, DevSecOps architects, product leads, mission experts, and defense specialists. We embrace Agile methodologies and secure development practices to ensure rapid iteration, compliance alignment, and seamless integration across modular systems. Our culture prioritizes clarity, precision, and innovation—fostering open communication, iterative refinement, and deep collaboration to deliver software and documentation that’s not only compliant, but strategic and impactful across DoD.
• Impactful Work: Your work here will directly support the Department of the Air Force in advancing defense technology. You’ll be at the forefront of innovations, creating new paradigms for providing access to computer power, modeling and simulation tools, and data sharing across organizations to the Department of the Air Force and broader Department of Defense.

Role And Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
• Perform Information Assurance and IT Security tasks to ensure the secure operation of the information systems
• Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. Including: process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.

Required Qualifications

• Active TS/SCI Clearance
• Bachelor’s degree in computer, information systems management or related field from an accredited college or university or equivalent experience.
• 5+ years’ professional experience
• Experience with DOD 8500.01, Risk Management Framework (RMF) requirements as well as experience in drafting, submitting, and maintaining RMF packages,
• Experience in development and maintaining of RMF Documents including System Security Plans (SSP), System Security Checklists, Privacy Impact Assessments, and Authority to Operate (ATO) artifacts.
• Experience in developing Plan of Action and Milestones (POA&M)
• Knowledge of independent verification and validation techniques
• Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.

Preferred Qualifications

• IAM Level II (CAP, CASP, CISM, CISSP) or comparable certification in accordance with DoD 8570.01-M.
• Knowledge in monitoring and conducting Security Control Assessment to ensure all controls meet security requirements as stipulated in the SSP, NIST SP 800-53, JSIG.
• Experience in developing waivers and exceptions for information system vulnerabilities.
• Knowledge of quality assurance, quality control, and independent verification and validation techniques.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.