KBR, Inc
Information System Security Officer (ISSO)
KBR, Inc, Chantilly, Virginia, United States, 22021
Information System Security Officer (ISSO)Apply locations Chantilly, Virginia
Time Type: Full time
Posted on: Posted 9 Days Ago
Job Requisition ID: R2095450
Title:
Information System Security Officer (ISSO)
Belong. Connect. Grow. with KBR!
KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.
Why Join Us?
Innovative Projects:
KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT, and cybersecurity solutions.
Collaborative Environment:
Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
Impactful Work:
Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.
KBR is seeking a Mid-level ISSO to be part of our team supporting our customer in Chantilly, VA that delivers mission-critical capabilities directly supporting intelligence-gathering missions from overhead systems. The ISSO is responsible for developing and implementing strategies to safeguard the organization's critical information assets, ensuring compliance with relevant security policies, standards, and regulations. The ISSO will help guide a team of professionals in identifying security risks, developing mitigation plans, and maintaining a robust security posture across the organization. The ideal candidate will have a strong background in space and intelligence systems with extensive experience using the Risk Management Framework (RMF).
This is a contingent position based upon contract award
Primary Responsibilities:
Develop, update, and/or review RMF documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), Risk Assessment Report (RAR), and Security Assessment Plan (SAP).
Assess system compliance against NIST, DoD, and IC security requirements to include the NIST 800-53 and 800-171 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Provide Subject Matter Expert (SME) knowledge on matters related to RMF activities across multiple systems and networks of various classifications.
Develop and implement information security policies, procedures, and guidelines in accordance with industry best practices, regulatory requirements, and required government policy (e.g. JSIG, NISPOM, NIST SP 800-171, NIST 800-53).
Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity policies.
Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes.
Collaborate with cross-functional teams to ensure the security of new and existing systems and applications.
Other duties as assigned.
Basic Qualifications:
Bachelor’s Degree in computer science, information systems, or related field and at least five (5) years of relevant work experience in IT or cybersecurity.
Minimum of two (2) years of experience performing ISSM or ISSO duties in classified environments.
DoD 8140-compliant baseline certification (CISSP preferred).
Experience with cloud service providers (CSPs) (e.g. AWS, Azure).
Demonstrated experience with Risk Management Framework.
Familiarity and experience with technologies such as eMASS, Xacta, ACAS, and Splunk.
Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs.
Excellent oral and written communication skills.
Security Clearance:
Active TS/SCI with Polygraph
INCLUSION AND DIVERSITY AT KBR
At KBR, we are passionate about our people, sustainability, and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a more inclusive and diverse company. Our individual differences and perspectives bring enhanced value to our teams and help us develop solutions for the most challenging problems.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.
#J-18808-Ljbffr
Time Type: Full time
Posted on: Posted 9 Days Ago
Job Requisition ID: R2095450
Title:
Information System Security Officer (ISSO)
Belong. Connect. Grow. with KBR!
KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.
Why Join Us?
Innovative Projects:
KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT, and cybersecurity solutions.
Collaborative Environment:
Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
Impactful Work:
Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.
KBR is seeking a Mid-level ISSO to be part of our team supporting our customer in Chantilly, VA that delivers mission-critical capabilities directly supporting intelligence-gathering missions from overhead systems. The ISSO is responsible for developing and implementing strategies to safeguard the organization's critical information assets, ensuring compliance with relevant security policies, standards, and regulations. The ISSO will help guide a team of professionals in identifying security risks, developing mitigation plans, and maintaining a robust security posture across the organization. The ideal candidate will have a strong background in space and intelligence systems with extensive experience using the Risk Management Framework (RMF).
This is a contingent position based upon contract award
Primary Responsibilities:
Develop, update, and/or review RMF documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), Risk Assessment Report (RAR), and Security Assessment Plan (SAP).
Assess system compliance against NIST, DoD, and IC security requirements to include the NIST 800-53 and 800-171 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Provide Subject Matter Expert (SME) knowledge on matters related to RMF activities across multiple systems and networks of various classifications.
Develop and implement information security policies, procedures, and guidelines in accordance with industry best practices, regulatory requirements, and required government policy (e.g. JSIG, NISPOM, NIST SP 800-171, NIST 800-53).
Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity policies.
Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes.
Collaborate with cross-functional teams to ensure the security of new and existing systems and applications.
Other duties as assigned.
Basic Qualifications:
Bachelor’s Degree in computer science, information systems, or related field and at least five (5) years of relevant work experience in IT or cybersecurity.
Minimum of two (2) years of experience performing ISSM or ISSO duties in classified environments.
DoD 8140-compliant baseline certification (CISSP preferred).
Experience with cloud service providers (CSPs) (e.g. AWS, Azure).
Demonstrated experience with Risk Management Framework.
Familiarity and experience with technologies such as eMASS, Xacta, ACAS, and Splunk.
Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs.
Excellent oral and written communication skills.
Security Clearance:
Active TS/SCI with Polygraph
INCLUSION AND DIVERSITY AT KBR
At KBR, we are passionate about our people, sustainability, and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a more inclusive and diverse company. Our individual differences and perspectives bring enhanced value to our teams and help us develop solutions for the most challenging problems.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.
#J-18808-Ljbffr