ISSE: National Security Cyber Defense Engineer

KBR Careers; Lanham (MD); On-site; USD 110,000 - 140,000; Full time

Job summary

KBR is seeking an Information System Security Engineer (ISSE) to design, implement, and sustain enterprise security across Windows, Linux, cloud, and virtualization platforms. You will lead vulnerability management and security tooling, while collaborating with admins, ISSOs, and development teams to deliver secure, compliant systems.

The role requires Top Secret with SCI, DoD 8570 IAT-III certs, and hands-on experience with Nessus, CyberArk, Splunk, and Trellix.

Qualifications

• Top Secret clearance with SCI required.
• DoD 8570.1-M/8140 IAT Level III certs (SecurityX/CASP, GCIH, CISA, CISSP) compliant.
• Strong background in networking, cloud security, Kubernetes, and DevSecOps.
• Hands-on experience with Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, Linux distros.
• Scripting and automation with PowerShell, Python, Bash and Ansible.
• Proven leadership and mentoring of ISSEs, plus ability to present technical briefings.

Responsibilities

• Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks and policies.
• Perform security engineering across the SDLC including requirements analysis and accreditation support.
• Implement vulnerability management processes using Nessus, ACAS, and Qualys.
• Integrate cybersecurity requirements into Windows and Linux servers, cloud, virtualization, and containers.
• Support incident response and forensics with Splunk Enterprise.
• Develop automation scripts using PowerShell, Bash, and Python to streamline remediation and monitoring.
• Collaborate with admins, ISSOs, and development teams to remediate findings and harden configurations.
• Perform security impact analyses for changes, deployments, and upgrades.
• Engineer endpoint protection and hardening with Trellix ePO, host-based firewalls, and whitelisting.
• Evaluate tools to improve security posture and continuous monitoring capabilities.
• Produce security documentation, SOPs, and executive risk reports.
• Administer CyberArk EPV, PVWA, CPM, PSM; monitor cyber events and maintain secure operation.
• Assist with integrated cyber defense and continuous monitoring programs.
• Establish a framework to measure cyber risk in the marketplace.
• Determine security requirements by business strategy and standards; conduct risk analyses.
• Implement intrusion detection methodologies and key management; verify via test scripts; train staff.
• Maintain compliance, respond to incidents, and ensure ongoing security awareness.

Skills

Networking

Cloud security

Kubernetes

DevSecOps

Powershell

Python

Ansible

Splunk

Tenable Nessus

Tools

Tenable Nessus

CyberArk

Trellix

Splunk Enterprise

VMware vSphere

GitLab

Windows Server

Red Hat Enterprise Linux

Ubuntu Linux

Ansible

Job description

KBR is seeking an Information System Security Engineer (ISSE) to design, implement, and sustain enterprise security across Windows, Linux, cloud, and virtualization platforms. You will lead vulnerability management and security tooling, while collaborating with admins, ISSOs, and development teams to deliver secure, compliant systems.

The role requires Top Secret with SCI, DoD 8570 IAT-III certs, and hands-on experience with Nessus, CyberArk, Splunk, and Trellix.