Information Systems Security Specialist (ISSO)

About the role

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions. Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact. Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment. KBR is seeking an experienced Information System Security Officer (ISSO) to directly support customer's information systems needs. As the ISSO, you will support the secure development, authorization, operation, and maintenance of Department of War (DOW) information systems. Day-to-day activities include assessing cybersecurity risks, evaluating system vulnerabilities, validating security controls, supporting Risk Management Framework and Authority to Operate activities, and coordinating cybersecurity requirements with engineering teams, program personnel, security officials, and government stakeholders. The ISSO will also prepare and maintain cybersecurity policies, procedures, assessment results, authorization documentation, continuous-monitoring records, and remediation plans. The position will also review system architectures and technical documentation, track security findings and Plans of Action and Milestones, support security assessments, and help ensure systems remain compliant with applicable DoW, Department of the Air Force, NIST, SCI, SAP, and program-specific requirements.

Responsibilities

• Support all phases of the DoD Risk Management Framework lifecycle, including system categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Develop, maintain, and update authorization and cybersecurity artifacts, including System Security Plans, Cybersecurity Strategies, Architecture Analysis Reports, Security Assessment Reports, Risk Assessment Reports, Security Controls Traceability Matrices, Continuous Monitoring Plans, vulnerability assessment reports, and Plans of Action and Milestones.
• Assess and