Information System Security Officer (ISSO)

Title:

Information System Security Officer (ISSO)

We are KBR

At KBR, we partner with clients to provide purposeful and comprehensive science, technology and engineering solutions to governments as well as the top tier commercial clients in green hydrogen and green ammonia. With a full portfolio of services, proprietary technologies and expertise, our approximately 37,000 employees are ready to handle projects and missions throughout their entire lifecycle, from planning and design to sustainability and maintenance.

Whether at the bottom of the ocean or in outer space, our clients trust us to deliver the impossible on a daily basis.

As the needs of the world change, we're ready to respond and guide the way forward with strategic, sustainable, and technological advancements grounded in more than a century of practical application and execution.

About the Role

KBR is seeking an experienced Information Systems Security Officer (ISSO) to join our Information Assurance (IA) Operations team in Beavercreek, OH. This position is onsite and will support cybersecurity operations and compliance activities for KBR information systems operating within classified environments.

Reporting directly to the Site Information Systems Security Manager (ISSM), the ISSO will serve as a key member of the Information Assurance team, supporting Assessment & Authorization (A&A) activities, continuous monitoring efforts, and cybersecurity compliance initiatives. This role is responsible for helping maintain Authorization to Operate (ATO) packages, assessing system security posture, and ensuring compliance with applicable DoD and federal cybersecurity requirements.

As a corporate position, employment is not tied to a specific contract.

Key Responsibilities

• Serve as the onsite Information Systems Security Officer (ISSO) supporting Information Assurance (IA) Operations and site-hosted information systems.
• Conduct security assessments of systems and networks to identify vulnerabilities, configuration deviations, and compliance gaps.
• Perform passive compliance evaluations and active vulnerability assessments to validate cybersecurity requirements and controls.
• Support Assessment & Authorization (A&A) activities and maintain Authority to Operate (ATO) packages in accordance with Risk Management Framework (RMF) requirements.
• Develop, review, and maintain RMF documentation, including System Security Plans (SSPs), Security Checklists, Privacy Impact Assessments (PIAs), POA&Ms, and other authorization artifacts.
• Assist with implementation and compliance of applicable cybersecurity requirements, including JSIG, NISPOM, NIST SP 800-53, NIST SP 800-171, and RMF guidance.
• Monitor system audit records and security events, conduct periodic reviews, and track corrective actions through closure.
• Analyze vulnerability scan results and coordinate remediation efforts with system administrators and technical stakeholders.
• Support security certification testing, inspections, audits, investigations, and compliance reviews.
• Assist in evaluating emerging technologies, software implementations, and hardware deployments to ensure cybersecurity requirements are met.
• Coordinate with site leadership and cross-functional teams to support security initiatives and maintain compliance requirements.
• Participate in continuous monitoring activities and contribute to process improvement efforts across IA Operations.

Basic Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field and 4+ years of ISSO experience; or equivalent combination of education and experience.
• Experience supporting DoD cybersecurity programs and Risk Management Framework (RMF) requirements.
• Experience developing, submitting, and maintaining RMF authorization packages.
• Experience supporting Joint Special Access Program Implementation Guide (JSIG) environments.
• Experience developing and maintaining RMF documentation, including SSPs, PIAs, Security Checklists, POA&Ms, and related ATO artifacts.
• Knowledge of independent verification and validation methodologies.
• Experience conducting research, analysis, and security assessments both independently and within a team environment.
• Current DoD 8570-compliant IAM Level I certification (Security+ CE, CAP, or equivalent).
• Active DoD Secret security clearance with the ability to obtain and maintain Top Secret/SCI eligibility, or a qualifying background investigation completed within the required timeframe.
• Strong written and verbal communication skills with the ability to communicate effectively across technical and non-technical audiences.

Preferred Qualifications

• Current IAM Level II certification (CISSP, CISM, CASP+, CAP, or equivalent).
• Experience conducting Security Control Assessments (SCAs) and validating security controls against SSP, NIST SP 800-53, and JSIG requirements.
• Knowledge of information system maintenance, asset management, and inventory control processes.
• Experience coordinating cybersecurity compliance activities with leadership and organizational stakeholders.
• Experience developing waiver and exception packages for information system vulnerabilities.
• Knowledge of quality assurance, quality control, and independent verification and validation practices.
• Experience supporting cybersecurity operations within a corporate environment and global enterprise.
• Familiarity with cybersecurity assessment and compliance tools, including eMASS, ACAS, SCAP Tool, or similar platforms.

Belong, Connect and Grow at KBR

At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.