Apply on Employer Site

KBR, Inc. · 1 month ago

Cyber Security SME (IA)

Colorado Springs, CO

Full-time

Hybrid

Senior Level, Lead/Staff

$143K/yr - $178K/yr

8+ years exp

KBR, Inc. is a leader in providing high-end engineering and advanced technology solutions to the intelligence and national security communities. The Cyber Security SME (IA) will provide Information Assurance and Cybersecurity expertise, ensuring compliance with security requirements and leading cybersecurity operations to protect national security.

ConsultingCyber SecurityInformation TechnologyProject ManagementSoftware EngineeringTraining

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Leads and performs cybersecurity operations support services spanning hardware, software, sensors, and network perimeters—including incident response, compliance reporting, vulnerability assessment, logging, RMF support, and CSSP coordination

Provides cyber critic assessment and management, safeguarding networks and systems against unauthorized infiltration, modification, destruction, or disclosure

Performs system administration and cybersecurity functions, ensuring SIPR and other networks comply with USAF/USSF cybersecurity requirements and directives

Develops, tests, and operates firewalls, intrusion detection systems, enterprise anti-virus platforms, and software deployment tools to maintain mission assurance

Conducts vulnerability assessments and management activities, including periodic and on-demand scans, analyzing trends, reporting results, and recommending remediation actions

Leads preparation and maintenance of RMF artifacts and ATO documentation; implements, monitors, and reports on security controls, directives, POA&Ms, and cyber posture in authoritative systems of record

Evaluates and tests security patches, new or replacement hardware/software, and configuration changes to ensure compatibility with security baselines

Implements, enforces, and manages security policies, procedures, and configuration management processes for data, applications, hardware, and telecommunications systems

Provides cyber lifecycle support to all tasks, from acquisition through sustainment, ensuring adherence to DoD and USAF/USSF cybersecurity frameworks and standards

Researches, evaluates, tests, and recommends new security tools, techniques, and technologies to improve defensive capabilities and operational efficiency

Responds to cybersecurity incidents, performing analysis, containment, eradication, and recovery actions, and develops countermeasures to limit impact

Supports security incident response team requirements, including inspections, audits, policy reviews, and strategic recommendations to enhance the organization’s security posture

Participates in cybersecurity working groups, provides documentation support, and assists in the creation and maintenance of mission-critical site documentation

Provides recommendations for IA and risk mitigation improvements, accommodating evolving cybersecurity threats and emerging technologies

Maintains Communications Security (COMSEC) material and ensures proper handling in accordance with applicable policies

Supports legacy system migration, AFI 17-130 implementations, and ongoing logistics modernization initiatives

Mentors junior cybersecurity personnel, contributes to process improvement, and provides technical expertise across multiple projects and mission areas

Qualification

Cybersecurity expertiseInformation AssuranceRMF supportCISSP certificationVulnerability assessmentVMwareHyper-VIncident responseCommunication skillsTeam collaboration

Required

BA/BS degree with 8+ years of relevant experience (or equivalent combination of education and experience)

One or more of the following certifications: CISSP, SecurityX (CASP+), Security+, GSEC, or equivalent DoD 8570/8140 baseline certification; ABET-accredited or CAE-designated degree acceptable in lieu

US Citizen

Active Top Secret security clearance with ability to obtain TS/SCI is required

Proficient in virtualization platforms, including VMware and Hyper-V

Familiar with the Enterprise Mission Assurance Support Service (eMASS) and RMF workflow management

Experienced with virtualization protocols, system hardening, and baseline management

Working knowledge of cybersecurity toolsets, including vulnerability scanners, SIEMs, and endpoint defense solutions

Preferred

Experience supporting NIPRNet, SIPRNet, VI/VTC, control system environments

Understanding of database and system administration is a plus

Experience with maintaining Communications Security (COMSEC) and COMSEC material IAW DAFMAN 17-1302-O, COMSEC Operations

Working knowledge in satellite communications environment highly desired

Exhibits exceptional degree of ingenuity, creativity, and resourcefulness for problem solving and customer service, excellent written and verbal communications skills

Benefits

401K plan with company match

Medical

Dental

Vision

Life insurance

AD&D

Flexible spending account

Disability

Paid time off

Flexible work schedule

Company

KBR, Inc.

Glassdoor4.0

At KBR, we deliver science, technology and engineering solutions that are helping governments and companies around the world take on the great challenges of our time.

Founded in 1919

Houston, Texas, USA

10001+ employees