Title:Information System Security Engineer (ISSE)Belong. Connect. Grow. with KBR!KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.Why Join Us?Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.Responsibilities:Design, implement, and maintain enterprise security architecture aligned with NIST RMF, DoD STIGs, CIS benchmarks, and organizational cybersecurity policiesPerform security engineering activities across system development lifecycle (SDLC), including requirements analysis, system design reviews, security testing, and accreditation supportImplement vulnerability management processes utilizing Tenable Nessus, ACAS, and Qualys to identify, assess, and remediate system vulnerabilitiesIntegrate cybersecurity requirements into Windows and Linux server environments, cloud infrastructure, virtualization platforms, and containerized applicationsSupport incident response and forensic investigations by analyzing security logs, SIEM alerts, network traffic, and endpoint telemetry using Splunk EnterpriseDevelop automation scripts using PowerShell, Bash, and Python to streamline vulnerability remediation, account auditing, compliance reporting, and security monitoring tasksCollaborate with system administrators, network engineers, ISSOs, and application teams to remediate security findings and implement secure configuration baselinesPerform security impact analysis for system changes, software deployments, and infrastructure upgrades to ensure continued compliance and operational securityEngineer endpoint protection and hardening solutions utilizing Trellix ePO – On-prem, host-based firewalls, and application whitelisting technologiesEvaluate and implement cybersecurity tools and technologies to improve system security posture, continuous monitoring, and threat detection capabilitiesProduce technical security documentation, architecture diagrams, standard operating procedures (SOPs), and executive-level risk assessment reportsExperience administrating, configuring, and troubleshooting core modules such as Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM) in CyberArkMonitor, analyze, and detect cyber events and incidents within information systems and networks under general supervisionAssist with integrated, dynamic cyber defense, coordinate and maintain security toolsets to support organizations’ continuous monitoring and ongoing authorization programsEstablish a framework by which cyber risk can be measured and quantified in the marketplaceDetermine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; identifying integration issues; preparing cost estimatesImplement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures; creating, transmitting, and maintaining keys; providing technical support; completing documentation. Verify security systems by developing and implementing test scriptsMaintain security by monitoring and ensuring compliance to standards, policies, and procedures; conducting incident response analyses; developing and conducting training programsResponsible for the design, development, implementation, and integration of a DoD IA architectures, systems, or system components for use within computing, network, and enclave environmentsEnsure that the architecture and design of development and operational systems are functional and secureThis includes designs for program of record systems and special purpose processing nodes with platform IT interconnectivityWork Environment:Location: On-Site – 540 National Business Parkway, Annapolis Junction, MDTravel Requirements: MinimalWorking Hours: StandardMinimum Qualifications:Requires Top Secret clearance with SCIMust have a DoD 8570.1-M/8140 IAT Level III certification (SecurityX (CASP), GCIH, CISA, CISSP) compliantStrong background in networking (TCP/IP, firewalls, VPNs), cloud security (AWS/Azure), Kubernetes, and DevSecOpsDeep understanding of NIST SP 800-161, NIST RMF, FedRAMP, Common Criteria, ATO package development, and cybersecurity compliance (STIGs)Hands-on experience managing and deploying Tenable Nessus, CyberArk, Trellix, Splunk Enterprise, VMware vSphere, GitLab, Microsoft Windows Server, Red Hat Enterprise Linux and Ubuntu LinuxExperience with scripting and automation with Powershell, Python, Bash and AnsibleProven experience in leading projects and mentoring junior ISSE'sPresent technical briefings to leadershipBasic Compensation: $110,000-$140,000 (This range is for Washington, DC only)The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.Additional Compensation:KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.