Senior Cybersecurity Analyst / Information Systems Security Officer (ISSO)

Trinzic; Colorado Springs (CO); On-site; USD 120,000 - 140,000; Full time

Benefits offered by this job

401K plan

Medical insurance

Paid time off

Job summary

KBR is seeking a Senior Cyber Security Analyst/ Information Systems Security Officer to ensure secure operation, maintenance, and disposal of systems in compliance with security policies. You will coordinate with teams to sustain robust cyber posture on AVAC networks.

Responsibilities include security control assessments, policy development, and risk reporting to leadership, leveraging RMF, DoD standards, and eMASS/XACTA tools in a demanding environment.

Qualifications

• Bachelor’s degree in IT or Cybersecurity.
• 5–10 years of DoD cybersecurity experience.
• Active TS clearance required.
• Experience with RMF, eMASS or XACTA.
• Knowledge of DoD and IC security standards.

Responsibilities

• Maintain operational security posture and compliance for all networks.
• Develop and manage security policies and procedures.
• Conduct vulnerability assessments and remediation planning.
• Coordinate RMF assessment activities and ATO processes.
• Review patches and security configurations for systems.
• Produce risk assessment reports for senior leadership.

Skills

RMF controls

DoD 8140

NIST standards

Risk assessment

Vulnerability mgmt

Communication

Education

Bachelor’s Degree in IT or Cybersecurity

Tools

eMASS

XACTA

STIG governance

Job description

Senior Cybersecurity Analyst / Information Systems Security Officer (ISSO)

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long‑term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions. Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Job Summary

KBR is seeking a Senior Cyber Security Analyst/ Information Systems Security Officer. The individual will work in close coordination with current team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures.

Duties May Include But Not Limited To

• Manage and perform duties and activities necessary to achieve and maintain operationally secure posture of all AVAC networks, to include operating, sustaining, and maintaining all compliance requirements.
• Development of all A&A documentation to include policies, plans, procedures, and other required artifacts throughout the life cycle of the systems.
• Develop and manage tailored organizational security policies and procedures for controlling system environments to maintain security, but also to ensure system availability.
• Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities
• Review and advise on updates, patches, and security technical implementation while maintaining control system performance and availability requirements.
• Ensure configuration and collection of control system audit logs for monitoring and forensic analysis as appropriate.
• Establish and maintain security configuration baseline for the control system(s), including field devices, IT components, interconnections, and interfaces.
• Maintain knowledge of the function and security of control systems and IT technologies with which the control systems interface.
• Maintain network segmentation to isolate control systems from business networks and other external connections as directed.
• Perform network cyber inspections to define vulnerability of cyber requirements, conduct technical analysis, and provide reports recommending integration of cyber requirements, capabilities, and training.
• Participate in control system change management in conjunction with IT personnel and control system experts (e.g., system supplier).
• Identify problems, determine accuracy and relevance of a broad range of technical information. Use sound judgment to generate, evaluate, and execute alternative courses of action for remediation or mitigation of findings.
• Produce timely, effective, decision-quality technical recommendations to support senior leadership risk acceptance.
• Actively engage with a variety of customers and mission partners, anticipating their needs, and delivering flawlessly.
• Conduct technical analyses and provide assessment reports on the integration of cyber requirements, capabilities and training, perform assessments of capability and the utility of new and emerging technologies, analyze assigned missions for capability gaps
• Provide threat analysis, track relevant prioritized incidents, and provide recommendations in coordination with the overall AVAC Cyber Operations team.
• Develop and perform tasks to execute Verification & Test plans to include delivering Risk Assessment Reports and Security Impact Assessments.
• Support risk assessments by reviewing and documenting the implementation status of security requirements of control systems.
• Development of all A&A documentation to include policies, plans, procedures, and other required artifacts throughout the life cycle of the systems.
• Develop and maintain DoDRMF Rev 5. eMASS and Xacta packages and required ATO compliance tasking taskings.
• Provide consultation to leadership on system security matters (e.g., risk assessment, configuration management) as needed.
• Perform system design reviews for changes, upgrades, and recommendations for mitigation or remediation of POA&Ms.
• Implement DOD and IC Risk Management Framework (RMF) Assessment requirements for control systems, and document/maintain records for them.
• Develop and maintain system incident and disaster response, including secure system recovery.
• Advise and coordinate with ISSM on the Cybersecurity Strategy and direction for the program.
• Identify and define tailored organizational security policies and procedures for control system environments to maintain security, but also to ensure system availability.

Required Experience

• 5-10 years of experience
• Top Secret SCI Clearance required
• Bachelor’s Degree (IT or Cybersecurity related) or equivalent related experience (Preferred)
• DoD Directive (DoDD) 8140.01certification Security+
• Working knowledge of DoDRMF Rev.4 and/or 5, cyber technologies, NIST standards and DISA STIG governance
• Experience with premise based isolated non-connected enclaves is preferred
• Strong working knowledge of technical control implementation, security control tailoring, accreditation, verification and validation audit concepts, and defense-in-depth is required.
• Experience with RMF controls, eMASS or XACTA, risk assessment, Plan of Actions and Milestones (POAMs), policy and plans documentation, Information Assurance Vulnerability Management (IAVM) and vulnerability assessment for mission systems required.
• Effective interpersonal skills are required with a demonstrated ability to support complex organizational relationships
• Excellent technical document preparation and verbal communication skills are

Preferred Experience

• GSEC, SCNP, SSCP, CISSP, CISA or higher
• Experience in cyber requirements design, development, implementation, deployment and remediation

Work Environment

• Location: On site
• Travel Requirements: Minimal
• Working Hours: Standard, 40 hours per week (Full-time)

Compensation

• For Colorado only, the salary range for this position is approximately $120,000 - $140,000. The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.

KBR Benefits

KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBR

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.