Information Systems Security Officer (ISSO)

KBR, Inc; Beavercreek (OH); On-site; USD 120,000 - 180,000; Full time

Job summary

KBR, Inc is seeking an Information Systems Security Officer (ISSO) to join our National Security Solutions team. This role supports the Department of the Air Force with a focus on secure operations, RMF compliance, and risk management across complex information systems.

You will perform system assessments, conduct vulnerability evaluations, and develop RMF artifacts including SSPs and ATO packages, collaborating with engineers, defense experts, and mission stakeholders in an Agile,

Qualifications

• Active TS/SCI clearance required.
• 5+ years of professional experience in information systems security and defense programs.
• Experience with DoD RMF/JSIG guidance and certification processes.
• Ability to develop and maintain RMF artifacts (SSP, SSP checklists, Privacy Impact Assessments, ATO artifacts).
• Strong analytical and coordination skills for government policy implementation.

Responsibilities

• Perform assessments of systems and networks to identify deviations from policies and enclave requirements.
• Execute passive (compliance audits) and active (vulnerability) evaluations.
• Conduct Information Assurance tasks to ensure secure operation of information systems and support certification.
• Support development and maintenance of RMF documentation (SSP, checklists, PIA, ATO).
• Coordinate actions across teams and manage documentation, investigations, and technology research.

Skills

Active TS/SCI clearance

5+ years experience

RMF knowledge

Independent verification & validation

DOD 8500.01 familiarity

POA&M development

Education

Bachelor’s degree in computer science or related field

Tools

RMF documents

System Security Plans (SSP)

POA&M artifacts

Job description

Title: Information Systems Security Officer (ISSO) Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role - protecting our national security.

Why Join Us?

Innovative Projects: At KBR, you'll be working on cutting-edge projects that support the Department of the Air Force’s most mission-critical operations.

Our team is pushing the boundaries of open-source development, DevSecOps with state-of-the-art CI/CD pipelines, containerization, Kubernetes, Terraform, Zarf, and innovative API management and database design.

You'll be contributing to systems designed for a modeling and simulation SaaS platform that provides dynamic compute power, access to tools, and collaboration capability through a model that will revolutionize the future of military research and development.

Collaborative Environment: Our team thrives in a dynamic, mission-driven environment where our employees work shoulder-to-shoulder with software engineers, DevSecOps architects, product leads, mission experts, and defense specialists. We embrace Agile methodologies and secure development practices to ensure rapid iteration, compliance alignment, and seamless integration across modular systems. Our culture prioritizes clarity, precision, and innovation- fostering open communication, iterative refinement, and deep collaboration to deliver software and documentation that’s not only compliant, but strategic and impactful across DoD.

Impactful Work: Your work here will directly support the Department of the Air Force in advancing defense technology. You’ll be at the forefront of innovations, creating new paradigms for providing access to computer power, modeling and simulation tools, and data sharing across organizations to the Department of the Air Force and broader Department of Defense.

Role and Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy.
• Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
• Perform Information Assurance and IT Security tasks to ensure the secure operation of the information systems Establishes strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems.
• Including: process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
• Assists in the implementation of the required government policy (i.e., JSIG, NISPOM, SP-800-171, SP-800-53, RMF) for site-hosted information systems and makes recommendations on process tailoring.
• Performs extensive analyses to validate established security requirements and to recommend additional security requirements and safeguards.
• Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.

Required Qualifications

• Active TS/SCI Clearance Bachelor’s degree in computer, information systems management or related field from an accredited college or university or equivalent experience.
• 5+ years’ professional experience Experience with DOD 8500.01, Risk Management Framework (RMF) requirements as well as experience in drafting, submitting, and maintaining RMF packages, Experience in development and maintaining of RMF Documents including System Security Plans (SSP), System Security Checklists, Privacy Impact Assessments, and Authority to Operate (ATO) artifacts.
• Experience in developing Plan of Action and Milestones (POA&M) Knowledge of independent verification and validation techniques Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.

Preferred Qualifications

• IAM Level II (CAP, CASP, CISM, CISSP) or comparable certification in accordance with DoD 8570.01-M. Knowledge in monitoring and conducting Security Control Assessment to ensure all controls meet security requirements as stipulated in the SSP, NIST SP 800-53, JSIG. Experience in developing waivers and exceptions for information system vulnerabilities. Knowledge of quality assurance, quality control, and independent verification and validation techniques.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR - Delivering Solutions, Changing the World.

KBR brings together the best and brightest to deliver science, technology and engineering solutions that help governments and companies around the world accomplish their most critical missions and objectives.

In everything we do, we are guided by our ONE KBR Values:

We Value Our People - We create diverse, inclusive environments in which each person can feel safe, respected and valued, and where everyone has opportunities to grow and reach their full potential.

We Deliver - We are uncompromising in our commitment to deliver innovative, high-quality, technology-led solutions for our customers and exceptional, sustainable value for all our stakeholders.

We Are People of Integrity - We value honesty, trust, courage, fairness, prudence and tenacity.

We Empower - We empower our people with a shared purpose, the right tools and the supportive culture they need to be proactive decision-makers, to be adaptive to change, and to succeed.

We Are a Team of Teams - We have a will to succeed, but we value the achievements of our team of teams over individual accomplishments.

Our collective focus makes us a better, stronger, more effective company.

We have also embedded environmental, social and governance (ESG) principles in every business operation and corporate function. Not only are we committed to operating safely, sustainably and equitably, but we are also committed to using our capabilities and expertise to help our customers accomplish their sustainability goals.

Worldwide, KBR employs a diverse workforce approximately 29,000 people strong, with customers in more than 80 countries and operations in 40 countries.

At KBR, We Deliver.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.