Information Systems Security Specialist (ISSO)

Trinzic; Beavercreek (OH); On-site; USD 110,000 - 170,000; Full time

Job summary

KBR is seeking an experienced Information System Security Officer (ISSO) to support secure development, authorization, operation, and maintenance of Department of War information systems. The ISSO will assess cybersecurity risks, validate controls, support RMF/ATO activities, and coordinate with engineering teams and government stakeholders.

The role involves preparing cybersecurity policies, maintaining assessment results, and ensuring compliance with DoD, NIST, and program-specific

Qualifications

• Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field.
• Demonstrated experience performing ISSO, cybersecurity analyst, information assurance, or equivalent responsibilities for DoD information systems.
• Practical experience with the DoD Risk Management Framework and Authority to Operate process.
• Working knowledge of DoD, Department of the Air Force, and NIST cybersecurity policies, controls, and guidance.
• Experience developing and maintaining RMF and authorization artifacts such as SSPs, SARs, RARs, POA&Ms, cybersecurity strategies, control traceability matrices, architecture analyses, and continuous monitoring documentation.
• Experience conducting security assessments, vulnerability reviews, risk analysis, control validation, and remediation tracking.
• Ability to communicate complex cybersecurity requirements clearly in written technical documentation and with technical, programmatic, and security stakeholders.
• Current DoD 8570/8140-compliant baseline certification appropriate to the position; Security+ CE or equivalent is acceptable subject to contract requirements.
• Ability to obtain and maintain a U.S. DoD security clearance

Responsibilities

• Support all phases of the DoD Risk Management Framework lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and update authorization and cybersecurity artifacts, including System Security Plans, Cybersecurity Strategies, Architecture Analysis Reports, Security Assessment Reports, Risk Assessment Reports, Security Controls Traceability Matrices, Continuous Monitoring Plans, vulnerability assessment reports, and Plans of Action and Milestones.
• Assess and mitigate cybersecurity threats and risks throughout the system and acquisition lifecycle.
• Conduct system security evaluations, vulnerability reviews, risk assessments, and security posture assessments to verify compliance with applicable DoD, Department of the Air Force, NIST, and program-specific requirements.
• Plan and support system certification and authorization activities, testing, liaison efforts, and Authority to Operate packages.
• Develop and update cybersecurity policies, procedures, guidance, and technical documentation supporting secure system operations and maintenance.
• Provide cybersecurity guidance to system development, test, integration, and sustainment environments.
• Review system architectures, technical drawings, requirements, and engineering documentation to identify cybersecurity gaps and recommend mitigations.
• Coordinate cybersecurity deliverables and adjudicate security requirements with technical teams, government stakeholders, assessors, security officials, and authorizing officials.
• Support secure operation of systems across SAP, SCI, Secret, and CUI environments, as applicable to the assigned program.
• Support vulnerability management, continuous monitoring, POA&M management, and remediation tracking.
• Facilitate cybersecurity working groups, technical interchange meetings, tabletop exercises, and cross-organizational engagements

Skills

RMF

DoD policies knowledge

Communication with stakeholders

Technical writing

Security clearance eligible

Education

Bachelor's degree in cybersecurity or related

Tools

eMASS

ITIPS

Job description

Information Systems Security Specialist (ISSO)

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

KBR is seeking an experienced Information System Security Officer (ISSO) to directly support customer's information systems needs.

As the ISSO, you will support the secure development, authorization, operation, and maintenance of Department of War (DOW) information systems. Day-to-day activities include assessing cybersecurity risks, evaluating system vulnerabilities, validating security controls, supporting Risk Management Framework and Authority to Operate activities, and coordinating cybersecurity requirements with engineering teams, program personnel, security officials, and government stakeholders.

The ISSO will also prepare and maintain cybersecurity policies, procedures, assessment results, authorization documentation, continuous-monitoring records, and remediation plans. The position will also review system architectures and technical documentation, track security findings and Plans of Action and Milestones, support security assessments, and help ensure systems remain compliant with applicable DoW, Department of the Air Force, NIST, SCI, SAP, and program-specific requirements.

Key Responsibilities

• Support all phases of the DoD Risk Management Framework lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and update authorization and cybersecurity artifacts, including System Security Plans, Cybersecurity Strategies, Architecture Analysis Reports, Security Assessment Reports, Risk Assessment Reports, Security Controls Traceability Matrices, Continuous Monitoring Plans, vulnerability assessment reports, and Plans of Action and Milestones.
• Assess and mitigate cybersecurity threats and risks throughout the system and acquisition lifecycle.
• Conduct system security evaluations, vulnerability reviews, risk assessments, and security posture assessments to verify compliance with applicable DoD, Department of the Air Force, NIST, and program-specific requirements.
• Plan and support system certification and authorization activities, testing, liaison efforts, and Authority to Operate packages.
• Develop and update cybersecurity policies, procedures, guidance, and technical documentation supporting secure system operations and maintenance.
• Provide cybersecurity guidance to system development, test, integration, and sustainment environments.
• Review system architectures, technical drawings, requirements, and engineering documentation to identify cybersecurity gaps and recommend mitigations.
• Coordinate cybersecurity deliverables and adjudicate security requirements with technical teams, government stakeholders, assessors, security officials, and authorizing officials.
• Support secure operation of systems across SAP, SCI, Secret, and CUI environments, as applicable to the assigned program.
• Support vulnerability management, continuous monitoring, POA&M management, and remediation tracking.
• Facilitate cybersecurity working groups, technical interchange meetings, tabletop exercises, and cross-organizational engagements

Required Qualifications

• Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field, plus the years of relevant experience required by the selected KBR job level and contract LCAT. Relevant additional experience may be considered in lieu of education where permitted.
• Demonstrated experience performing ISSO, cybersecurity analyst, information assurance, or equivalent responsibilities for DoD information systems.
• Practical experience with the DoD Risk Management Framework and Authority to Operate process.
• Working knowledge of DoD, Department of the Air Force, and NIST cybersecurity policies, controls, and guidance.
• Experience developing and maintaining RMF and authorization artifacts such as SSPs, SARs, RARs, POA&Ms, cybersecurity strategies, control traceability matrices, architecture analyses, and continuous monitoring documentation.
• Experience conducting security assessments, vulnerability reviews, risk analysis, control validation, and remediation tracking.
• Ability to communicate complex cybersecurity requirements clearly in written technical documentation and with technical, programmatic, and security stakeholders.
• Current DoD 8570/8140-compliant baseline certification appropriate to the position; Security+ CE or equivalent is acceptable subject to contract requirements.
• Ability to obtain and maintain a U.S. DoD security clearance

Desired Qualifications

• Master's degree in cybersecurity, information assurance, engineering management, or a related discipline.
• Direct experience supporting SCI and Special Access Program environments and applying the Joint SAP Implementation Guide.
• Experience with developmental or acquisition programs, including cybersecurity integration across engineering milestones and technical reviews.
• Experience supporting aerospace, unmanned aircraft, command-and-control, GPS/PNT, avionics, or other defense mission systems.
• Experience with eMASS, ITIPS, security classification guidance, cybersecurity tabletop exercises, Mission-Based Cyber Risk Assessments, or attack-path analysis.
• Experience coordinating with Security Control Assessors, Program Security Officers, Special Security Officers, Authorizing Officials, and government program offices.
• Strong facilitation, stakeholder engagement, and technical writing skills.
• Active Top Secret clearance with SCI eligibility

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.