Information Systems Security Officer (ISSO)

Title: Information Systems Security Officer (ISSO) Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. Why Join Us? Innovative Projects: At KBR, you'll be working on prototype projects that support the U.S. Air Force Research Laboratory’s most mission-critical objectives. The Air Force Research Laboratory is the primary scientific research and development center for the Department of the Air Force. AFRL plays an integral role in leading the discovery, development, and integration of affordable warfighting technologies for our air, space, and cyberspace force. Collaborative Environment: KBR fosters a dynamic and collaborative atmosphere where cross-functional teams of product owners, engineers, developers, and defense experts work in unison. We practice Agile and DevOps principles, ensuring rapid iteration, continuous feedback, and integration across all projects. Our team is passionate, forward-thinking, and united by a mission-first mindset that encourages knowledge sharing, innovation, and problem-solving at every level. Impactful Work: Your work here won’t just be limited to software development—it will directly support the Air Force in expanding current national capabilities. As the Air Force's leader for National-to-Tactical capability development, AFRL collaborates with leading experts across the Intelligence Community, Department of Defense, National Laboratories, industry, inter-agency, academia, and partner nations. Key Responsibilities: Architect, develop and implement out-of-the-box cyber solutions to meet warfighter needs and ensure end-to-end security Serve as a cybersecurity advisor to the Government Analyze customer requirements and identify the need for cybersecurity solutions Develop and maintain a deep understanding of the organization’s overall technology landscape Create and maintain documentation for systems, enclaves, applications, including design documents, implementation guides, standard operating procedures, and approval paperwork Oversee implementation of RMF, NIST SP 800-53, and STIG requirements, ensuring alignment with DoD security mandates Perform vulnerability assessments, support remediation of scan findings and IAVAs, and manage incident response workflows and recovery operations to maintain hardened security posture Support security documentation, security control assessments, and continuous monitoring in alignment with FISMA Loading and managing cryptographic keys for High Assurance Internet Protocol Encryptors (HAIPE) Provide expert guidance in support of cyber audits, ATO packages, and continuous compliance processes Engage with customers to better define the problem space and vision to determine capabilities and priorities for prototypes Work across multiple technology stacks, gaining hands-on experience with various languages, frameworks, and tools to support a broad range of applications Required Qualifications: Security Clearance: Active TS/SCI, eligible for SAP Education: BS degree in Computer Science or Information Systems. Other degrees will be considered with relevant work experience. One or more of the following certifications (must be current): CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP, CISSP-Associate, CISSP-ISSMP At least four (4) years of experience applying the DoD Risk Management Framework (RMF), including: NIST SP 800-53, DISA STIGs, SCAP and IAVAs, FISMA Experience managing cybersecurity projects in cloud environments (AWS, Azure, or VMware) Experience supporting ATO processes, POA&Ms, and cyber strategy development in federal or military environments Knowledge of Linux and Windows Operating Systems Knowledge of networking architecture and devices and supporting infrastructure, including IDSs, firewalls, and CDSs Experience with Kubernetes and containerization Strong passion for conducting independent research, tackling complex problems, and continuously learning and adopting new technologies Excellent communication and collaboration skills Strong problem-solving and analytical skills Ability to work in a fast-paced environment and meet deadlines Desired Qualifications: At least eight (8) years of experience analyzing, assessing, and implementing corrective actions based on vulnerability scanning and penetration testing results At least eight (8) years of experience supporting defensive cyber operations for DoD, including incident handling, reporting, system defense, and information recovery Knowledge of Cybersecurity Process and Approval for Special Access Programs (SAPs) DevSecOps experience integrating security measures throughout the entire SDLC Familiar with air-gapped Kubernetes deployments using Helm charts and Zarf Proficient in using GitLab for vers