Information System Security Manager (ISSM)

Why Join Us?

Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.

Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.

Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

This position is primarily remote, with occasional travel to DoD installations for meetings and ad‑hoc work.

Responsibilities

• Deliver documentation including executive‑level briefings, assessments, self‑assessments, RMF packages, and supporting RMF documentation.
• Review cybersecurity tool reports (ACAS, HBSS) for reporting and compliance.
• Develop software certification packages.
• Work directly with the TRMC SISO on all TRMC RMF packages and ATO status updates.
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for each system, auditing all artifacts in RMF packages to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities, including test reports and POA&Ms.
• Monitor system status updates and report to senior leadership, including monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
• Present monthly executive briefings to SISO and PM on security metrics.
• Interface with PMs and SISO on issues needing input/concurrence.
• Draft and present RMF deliverables to senior leadership and attend Executive Program Reviews as the ISSM.
• Work with outside agencies on Memorandums of Understanding, Interconnection Service Agreements, and other senior‑level agreements.
• Collaborate with a distributed team to reduce travel; travel up to 25% of the time.

Basic Qualifications

• TS/SCI clearance required.
• Minimum 2 years of IT Information Assurance or Cyber Security engineering experience.
• Minimum 2 years conducting security assessments and guiding programs through the RMF process.
• Bachelor’s degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s degree preferred.
• Expertise assessing security controls per NIST Special Publications (e.g., NIST 800 series).
• In‑depth knowledge of cybersecurity principles, technologies, and processes.
• Experience with NIST 800‑53 and security development.
• Familiarity with assessments for unclassified and classified environments.
• Ability to adapt to process changes and interface with senior leadership.
• Strong oral and written communication skills.

Compensation

Basic salary range: $155,000 – $190,000 (Virginia only). The offered rate will be based on the selected candidate’s knowledge, skills, abilities, experience, and internal parity considerations.

Additional compensation may include bonuses, commissions, sign‑on bonuses, relocation benefits, short‑term incentives, long‑term incentives, or discretionary payments for exceptional performance, per internal policy or contractual designation.

Benefits

• 401(k) plan with company match.
• Medical, dental, and vision insurance.
• Life insurance and AD&D coverage.
• Flexible spending account.
• Disability insurance.
• Paid time off and flexible work schedule.
• Career advancement through professional training and development.