Title:
Information Systems Security Officer (ISSO)
?Note: This role is contingent upon final funding; Remote or Tele-Work is not available for this role.
Program Summary:
KBR's Mission Engineering Division delivers complex technical solutions and expert support to the U.S. Department of Defense, specializing in modeling and simulation, cyber transformation, air vehicle mission integration, and lifecycle support. As a trusted partner with a proven history in mission technology, KBR collaborates closely with clients to develop innovative and effective solutions. With a strong ethical framework, KBR prioritizes data security, privacy, and responsible information management to ensure mission success.
Job Summary:
?KBR has an opening for an Information Systems Security Officer to join our team of qualified, diverse individuals onsite at Patuxent River NAS, MD. This position requires on site presence. In this role, you will serve as an Information Systems Security Officer (ISSO) for Government information systems in support of a Program Management Activity (PMA).
Roles and Responsibilities:
Serve as an Information Systems Security Officer (ISSO) for Government information systems in support of a Program Management Activity (PMA).
Performs extensive assessments of systems and networks within the networking environment or enclave and identify where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Candidate will achieve this through passive evaluations (compliance audits) and active evaluations (vulnerability assessments).
Establish strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This includes process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
Assists in the implementation of the required government policy (i.e., RMF, NISPOM, JSIG) and makes recommendations on process tailoring.
Performs extensive analyses to validate established security requirements and to recommends additional security requirements and safeguards.
Supports the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
Periodically conducts of a review of each system's audits and monitors corrective actions until all actions are closed.
Basic Qualifications:
Bachelor's degree in computer science, information systems management, or related field and 4 years of experience. In lieu of a degree, an additional 8 years of relevant experience may be substituted for a bachelor's degree.
2 years of experience with mid-sized client/server systems in systems analysis, software design, software development, and system administration are required.
Experience with DoD M5205.07 Series, Risk Management Framework (RMF) or Joint SAP Implementation Guide (JSIG) requirements is required.
Knowledge of quality assurance, quality control, and independent verification and validation techniques is required
Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.
Experience with managing secure Information Systems (IS) and databases while implementing and maintaining cross-domain solutions is required.
A current Information Assurance Manager (IAM) Level I certification in accordance with DoD 8570.01-M, or the ability to gain the IAM Level I certification within six months is required.
A current Top-Secret Clearance with a Single Scope Background Investigation (SSBI) completed within the last 5 years is required. Applicant selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Preferred Qualifications:
Implement Risk Management Framework (RMF) in accordance with NIST SP 800, Joint Special Access Program Implementation Guide (JSIG).
Participates in the development and maintenance of system security plans and contingency plans for all systems under their responsibility.
Draft, maintain, Planned, System Security Checklists, Privacy Impact Assessments, POA&M, and Authority to Operate (ATO) artifacts.
Develop Plan of Action and Milestones (POA&M) for identified vulnerabilities and ensure compliance through monthly / quarterly updates.
Maintain inventory of all information Security System assigned.
Develop a variety of Assessment & Authorization deliverables including System Security Plan (SSP), Security Assessment Report (SAR), Contingency Plan (CP) and POA&M for review and approval for Authorization Official.
Scheduled Weekly Hours:
40 hours/week
Compensation:
$102,630 - $154,000
The offered rate will be based on the selected candidate's location, knowledge, skills, abilities, and/or experience, contract affordability, and in consideration of internal parity.
KBR Benefits?
KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule.? We support career advancement through professional training and development.? Click here to learn more:? KBR Benefits (https://careers.kbr.com/us/en/kbr-benefits) .
Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.
