[Hiring] Information System Security Manager @KBR, Inc.

Role Description

KBR is seeking an Information System Security Manager (ISSM) to join our team. This position is primarily remote; however, the ISSM will be able to go into the DoD installation space for meetings and work on an ad-hoc and sometimes immediate basis.

The selected applicant will provide cybersecurity and Risk Management Framework (RMF) support to systems and applications for the Test Resource Management Center (TRMC). Responsibilities include:

• Deliver documentation to include: Executive level briefings, Assessments, Self-Assessments, RMF packages, and supporting RMF documentation.
• Review Cybersecurity tool reports, ACAS, HBSS, for the purposes of reporting and compliance.
• Software Certification package development.
• Work directly with the TRMC SISO on all TRMC RMF packages and ATO Status updates.
• Support security engineering projects and solution delivery.
• Lead security audit and compliance activities for each system responsible for.
• Responsible for auditing all artifacts provided in each RMF package to determine system readiness for ATO packet submissions.
• Provide recommendations to the SISO, PM, and AO regarding remediation and mitigation of identified vulnerabilities on test reports and plan of action and milestones (POA&Ms).
• Monitor system status updates and report to senior leadership, including monthly executive reports, vulnerability reports, JFHQ DODIN reporting and briefing.
• Monthly executive briefing to SISO, PM on security metrics.
• Interface with PMs and SISO on issues needing input/concurrence.
• Draft and present RMF deliverables to senior leadership.
• Attend Executive Program Reviews as the ISSM.
• Work with outside agencies on Memorandums of Understanding / Interconnection Service Agreements, and other senior level agreements.
• Work directly with a distributed team to reduce travel.
• Travel 25% of time.

Qualifications

• *TS/SCI required*
• A minimum of 2 years of Information Technology Information Assurance, or Cyber Security engineering experience.
• A minimum of 2 years of experience in conducting security assessments by reviewing security controls with the ISSO/ISSM and guiding programs through RMF process.
• Bachelor’s Degree in Engineering, Computer Science, or 8 years IT field experience in lieu of degree; Master’s Degree preferred.
• Experience working with Special Access Programs (SAP).
• Proven expertise with assessing security controls in accordance with NIST Special Publications (i.e.: NIST 800 Series).
• Proven in-depth knowledge of Cybersecurity principles, technologies, and processes.
• Experience with NIST 800-53, Security Development.
• Familiarity with performing assessments for Unclassified and Classified environments.
• Ability to adapt to process changes.
• Ability to interface with senior leadership.
• Ability to support high visibility or high priority projects.
• Possession of excellent oral and written communication skills.

Requirements

• Basic Compensation:
• $155,000 - $190,000 (For DC area Only)
• $155,000 - $190,000 (For Point Mugu, California Only)
• $145,000 - $185,000 (For Maryland only)
• The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.

Benefits

• KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation.
• Additional compensation may be in the form of sign-on bonus, relocation benefits, short-term incentives, long-term incentives, or discretionary payments for exceptional performance.
• KBR offers a selection of competitive lifestyle benefits which could include:
• 401K plan with company match
• Medical, dental, vision, life insurance, AD&D
• Flexible spending account
• Disability
• Paid time off
• Flexible work schedule
• We support career advancement through professional training and development.