Information Systems Security Officer (ISSO)

KBR Careers; Colorado Springs (CO); On-site; USD 104,000 - 120,000; Full time

Benefits offered by this job

401K with company match

Medical coverage

Dental coverage

Vision coverage

Life insurance

AD&D

Flexible spending account

Disability insurance

Paid time off

Flexible work schedule

Job summary

KBR's National Security Solutions team seeks an Information Systems Security Officer (ISSO) in Colorado Springs. The role focuses on implementing end-to-end cybersecurity aligned with DoD standards and supporting the Air Force research and national security objectives.

You will lead RMF implementations, conduct vulnerability management, and collaborate with cross-functional teams in a fast-paced environment. A TS/SCI clearance and DoD experience are required.

Qualifications

• Active TS/SCI clearance, eligible for SAP.
• BS degree in Computer Science or Information Systems.
• Current certifications from the list (CISM, CISSP, etc.).
• 4+ years applying RMF with NIST SP 800-53, DISA STIGs, SCAP, and IAVAs.
• Experience with cloud environments (AWS/Azure/VMware).
• Experience supporting ATO processes and cyber strategy in federal/military settings.
• Proficiency in Linux/Windows OS and networking hardware.
• Knowledge of Kubernetes and containerization.
• Strong communication and collaboration skills.
• Ability to work in fast-paced environments and meet deadlines.

Responsibilities

• Architect, develop and implement cyber solutions for warfighter needs.
• Serve as a cybersecurity advisor to the Government.
• Analyze requirements and identify cybersecurity needs.
• Maintain understanding of the org's technology landscape.
• Create documentation: design documents, SOPs, approvals.
• Oversee RMF, NIST SP 800-53, STIG requirements per DoD mandates.
• Perform vulnerability assessments and manage incident response workflows.
• Support security documentation and continuous monitoring per FISMA.
• Manage cryptographic keys for HAIPE devices.
• Guide audits, ATO packages, and compliance processes.
• Engage with customers to define problems and capabilities for prototypes.
• Work across stacks with various languages and tools.

Skills

RMF

NIST SP 800-53

STIGs

Cloud security

Kubernetes

Containerization

Linux

Windows

Networking

Threat analysis

Incident response

DevSecOps

Agile

GitLab

CI/CD

Education

Bachelor's degree in Computer Science or Information Systems

Tools

AWS

Azure

VMware

GitLab

Job description

Information Systems Security Officer (ISSO)

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us?

• Innovative Projects: At KBR, you'll be working on prototype projects that support the U.S. Air Force Research Laboratory’s most mission-critical objectives. The Air Force Research Laboratory is the primary scientific research and development center for the Department of the Air Force. AFRL plays an integral role in leading the discovery, development, and integration of affordable warfighting technologies for our air, space, and cyberspace force.
• Collaborative Environment: KBR fosters a dynamic and collaborative atmosphere where cross-functional teams of product owners, engineers, developers, and defense experts work in unison. We practice Agile and DevOps principles, ensuring rapid iteration, continuous feedback, and integration across all projects. Our team is passionate, forward-thinking, and united by a mission-first mindset that encourages knowledge sharing, innovation, and problem-solving at every level.
• Impactful Work: Your work here won’t just be limited to software development—it will directly support the Air Force in expanding current national capabilities. As the Air Force's leader for National-to-Tactical capability development, AFRL collaborates with leading experts across the Intelligence Community, Department of Defense, National Laboratories, industry, inter-agency, academia, and partner nations.

Key Responsibilities

• Architect, develop and implement out-of-the-box cyber solutions to meet warfighter needs and ensure end-to-end security
• Serve as a cybersecurity advisor to the Government
• Analyze customer requirements and identify the need for cybersecurity solutions
• Develop and maintain a deep understanding of the organization’s overall technology landscape
• Create and maintain documentation for systems, enclaves, applications, including design documents, implementation guides, standard operating procedures, and approval paperwork
• Oversee implementation of RMF, NIST SP 800-53, and STIG requirements, ensuring alignment with DoD security mandates
• Perform vulnerability assessments, support remediation of scan findings and IAVAs, and manage incident response workflows and recovery operations to maintain hardened security posture
• Support security documentation, security control assessments, and continuous monitoring in alignment with FISMA
• Loading and managing cryptographic keys for High Assurance Internet Protocol Encryptors (HAIPE)
• Provide expert guidance in support of cyber audits, ATO packages, and continuous compliance processes
• Engage with customers to better define the problem space and vision to determine capabilities and priorities for prototypes
• Work across multiple technology stacks, gaining hands‑on experience with various languages, frameworks, and tools to support a broad range of applications

Required Qualifications

• Security Clearance: Active TS/SCI, eligible for SAP
• Education: BS degree in Computer Science or Information Systems. Other degrees will be considered with relevant work experience.
• One or more of the following certifications (must be current): CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP, CISSP-Associate, CISSP-ISSMP
• At least four (4) years of experience applying the DoD Risk Management Framework (RMF), including: NIST SP 800-53, DISA STIGs, SCAP and IAVAs, FISMA
• Experience managing cybersecurity projects in cloud environments (AWS, Azure, or VMware)
• Experience supporting ATO processes, POA&Ms, and cyber strategy development in federal or military environments
• Knowledge of Linux and Windows Operating Systems
• Knowledge of networking architecture and devices and supporting infrastructure, including IDSs, firewalls, and CDSs
• Experience with Kubernetes and containerization
• Strong passion for conducting independent research, tackling complex problems, and continuously learning and adopting new technologies
• Excellent communication and collaboration skills
• Strong problem-solving and analytical skills
• Ability to work in a fast-paced environment and meet deadlines

Desired Qualifications

• At least eight (8) years of experience analyzing, assessing, and implementing corrective actions based on vulnerability scanning and penetration testing results
• At least eight (8) years of experience supporting defensive cyber operations for DoD, including incident handling, reporting, system defense, and information recovery
• Knowledge of Cybersecurity Process and Approval for Special Access Programs (SAPs)
• DevSecOps experience integrating security measures throughout the entire SDLC
• Familiar with air-gapped Kubernetes deployments using Helm charts and Zarf
• Proficient in using GitLab for version control, CI/CD pipelines, and collaboration
• Experienced in leveraging Agile Software Development methodologies for efficient and iterative project management
• High level of curiosity and investigative mindset with an attention to detail, a tenacity of thought, the flexibility to adapt to new challenges, and the resiliency to overcome short-term hurdles by staying focused on the team's deliverables

Work Environment

• Location: Colorado Springs, CO (On-site)
• Travel Requirements: Minimal
• Working Hours: Standard, 40 hours per week (Full-time)

Compensation

• For Colorado only, the salary range for this position is approximately $104,000 - $120,000. The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Other Compensation KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

R2128081