Apply on Employer Site

KBR, Inc. · 4 months ago

Senior Information System Security Officer (ISSO)

Chantilly, VA

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

KBR, Inc. is a leader in providing high-end engineering and advanced technology solutions to the intelligence and national security communities. They are seeking a Senior Information System Security Officer (ISSO) to develop and implement strategies for safeguarding critical information assets while ensuring compliance with security policies and regulations.

ConsultingCyber SecurityInformation TechnologyProject ManagementSoftware EngineeringTraining

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Develop, update, and/or review RMF documentation to include the System Security Plan (SSP), Security Control Traceability Matrix (SCTM), Plan of Action and Milestone (POA&M), Risk Assessment Report (RAR), and Security Assessment Plan (SAP)

Assess system compliance against NIST, DoD, and IC security requirements to include the NIST 800-53 and 800-171 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)

Provide Subject Matter Expert (SME) knowledge on matters related to RMF activities across multiple systems and networks of various classifications

Develop and implement information security policies, procedures, and guidelines in accordance with industry best practices, regulatory requirements, and required government policy (e.g. JSIG, NISPOM, NIST SP 800-171, NIST 800-53)

Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity policies

Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes

Collaborate with cross-functional teams to ensure the security of new and existing systems and applications

Other duties as assigned

Qualification

Risk Management FrameworkNIST 800-53CISSP certificationCloud service providersEMASSXactaACASSplunkCommunication skills

Required

Bachelor's Degree in computer science, information systems, or related field and at least ten (10) years of relevant work experience in IT or cybersecurity

Minimum of five (5) years of experience performing ISSM or ISSO duties in classified environments

DoD 8140-compliant baseline certification (CISSP preferred)

Experience with cloud service providers (CSPs) (e.g. AWS, Azure)

Demonstrated experience with Risk Management Framework

Familiarity and experience with technologies such as eMASS, Xacta, ACAS, and Splunk

Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs

Excellent oral and written communication skills

Active TS/SCI with Polygraph

Preferred

CISSP preferred

Company

KBR, Inc.

Glassdoor4.0

At KBR, we deliver science, technology and engineering solutions that are helping governments and companies around the world take on the great challenges of our time.

Founded in 1919

Houston, Texas, USA

10001+ employees