KBR is a company that delivers science, technology and engineering solutions to governments and companies around the world. They are seeking an IT Information Assurance Specialist (ISSO) to assist in supporting assessments of systems and networks, ensuring compliance with security requirements and policies, and supporting the certification and accreditation processes for information systems.
Serves as an Information Systems Security Officer (ISSO) for information systems in support of a Program Management Activity (PMA). U May achieve this through passive evaluations (compliance audits) and/or active evaluations (vulnerability assessments).
Supports the establishment of strict program control processes to ensure mitigation of risks and supports obtaining certification and accreditation of systems. This may include process support, analysis support, coordination support, security certification test support, security documentation support, investigations, software research, hardware introduction and release, emerging technology research inspections and periodic audits.
Assists in the implementation of the required government policy and may make recommendations on process tailoring.
Assist/supports the performance of analyses to validate established security requirements and to recommend additional security requirements and safeguards.
May support the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
Periodically, conducts a review of each system's audits and monitors corrective actions until all actions are closed.
Qualification
Required
Bachelor’s degree in Cybersecurity, information systems management or related field from an accredited US college or university or equivalent experience is required, plus two years of related experience.
Must have two years of related experience.
A current Top-Secret Clearance with a Single Scope Background Investigation (SSBI) completed within the last six years is required.
Experience in a DoD cyber environment, preferably with the Department of the Navy is required.
Experience with cyber frameworks and best practices, such as NIST 800-53, JSIG and ISO 27001.
Understanding and experience with Risk Management Frameworks (RMF) and processes is required.
A current Information Assurance Manager (IAM) Level I certification in accordance with DoD 8570.01-M, or the ability to gain the IAM Level I certification within six months is required.
Experience working independently and as part of a team in researching data, developing analytical techniques and methodologies is required.
Preferred
Experience with auditing and log analysis on both Windows and Linux (Redhat) devices as it relates to compliance and nonrepudiation techniques.
Experience with importing, exporting and reviewing syslogs.
Experience with log reduction tools and SIEM solutions such as Splunk, LogInsight, Aria Operations.
Experience with private cloud infrastructure and cloud security posture.
Experience with VMware/Broadcom suite of applications and services.
Experience in the development and maintenance of system security plans and contingency plans for secure systems.
Applicant selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information.
Benefits
401K plan with company match
Medical
Dental
Vision
Life insurance
AD&D
Flexible spending account
Disability
Paid time off
Flexible work schedule
We deliver science, technology and engineering solutions to governments and companies around the world.
Glassdoor
4.0
Founded in 1919
Houston, Texas, USA
10001+ employees
https://www.kbr.com
We deliver science, technology and engineering solutions to governments and companies around the world.
