ISSE: National Security Cyber Defense Engineer

KBR; Annapolis (MD); On-site; USD 108,800 - 163,200; Full time

Job summary

KBR, Inc is seeking an Information System Security Engineer (ISSE) to strengthen the security posture of national security systems. You will design and maintain enterprise security architectures aligned with NIST RMF and DoD STIGs, and drive remediation across Windows, Linux, cloud, and container platforms.

The role emphasizes vulnerability management, incident response, and secure DevSecOps practices. You will produce security documentation, risk assessments, and participate in leadership

Qualifications

• Requires active Top Secret clearance with SCI.
• Must hold DoD 8570.1-M/8140 IAT Level III certification.
• Strong background in networking, cloud security, and DevSecOps.
• Experience with vulnerability tools and incident response.

Responsibilities

• Design, implement, and maintain enterprise security architecture per NIST RMF and DoD STIGs.
• Perform SDLC security activities: requirements, design reviews, testing, accreditation.
• Manage vulnerabilities with Nessus, ACAS, Qualys; remediate findings.
• Secure Windows/Linux servers, cloud infra, and containerized apps.
• Support incident response, log analysis, SIEM, and threat hunting with Splunk.
• Develop automation scripts (PowerShell/Python/Bash) for remediation and auditing.
• Collaborate with admins, ISSOs, and dev teams to apply secure baselines.
• Prepare DoD IA documents, SOPs, and risk assessments.

Skills

Security engineering

NIST RMF

Cloud security

Kubernetes

DevSecOps

Threat detection

Education

DoD 8570.1-M/8140 IAT Level III certification

Tools

Tenable Nessus

CyberArk

Trellix

Splunk Enterprise

VMware vSphere

Windows Server

Red Hat Enterprise Linux

Ubuntu Linux

GitLab

Job description

KBR, Inc is seeking an Information System Security Engineer (ISSE) to strengthen the security posture of national security systems. You will design and maintain enterprise security architectures aligned with NIST RMF and DoD STIGs, and drive remediation across Windows, Linux, cloud, and container platforms.

The role emphasizes vulnerability management, incident response, and secure DevSecOps practices. You will produce security documentation, risk assessments, and participate in leadership