KBR - Bloomington, IN
posted about 2 months ago
Full-time - Mid Level
Bloomington, IN
Professional, Scientific, and Technical Services
About the position
The Information Assurance (IA)/Cyber Engineer position at KBR involves supporting the Advanced Analytics and Cloud team for the CBM+ program, focusing on cybersecurity for government customers within the Department of Defense (DoD). The role emphasizes ensuring the integrity, confidentiality, and availability of information systems while collaborating with various stakeholders to implement comprehensive cybersecurity strategies and maintain compliance with DoD standards.
Responsibilities
- Work closely with a team to ensure the integrity, confidentiality, and availability of information systems.
- Provide expertise on US Navy and US Marine Corps (USMC) cyber processes and protocols.
- Collaborate with departments and stakeholders to ensure comprehensive cybersecurity strategies and compliance with DoD standards.
- Address system configurations with system engineers and network operators to identify, remediate, track, and report vulnerabilities.
- Ensure updates to the system baseline are tracked and tested for security impact.
- Review and update system engineering documentation such as the Hardware and Software (HW/SW) list and network diagram.
- Verify the technical assessment of all applicable devices in the authorization boundary.
- Utilize DISA STIG and SRG checklists, SCAP, EvaluateSTIG, and ACAS vulnerability scanning to maintain situational awareness of CBM+ systems.
- Review, update, and disseminate the System Security Plan (SSP) and information security policies as part of ongoing authorizations and audits.
- Develop and update system-level documentation including the Disaster Recovery and Contingency Plan (DR/CP) and Incident Response Plan (IRP).
Requirements
- Must be a US Citizen with an Active/Current DoD Secret clearance or the ability to obtain and maintain.
- Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent experience.
- In-depth knowledge of US Navy and USMC cyber processes and protocols.
- Proficiency in the Risk Management Framework (RMF).
- Experience in conducting security assessments, audits, and vulnerability management.
- Experience with eMASS and ATOs.
- Strong analytical and problem-solving skills.
- Excellent communication and teamwork abilities.
- Knowledge of security standards and regulations (e.g., NIST, FISMA, HIPAA).
Nice-to-haves
- Prior experience working within a US Navy or USMC cyber environment.
- Relevant certifications such as CISSP, CISM, CEH, or similar.
- Knowledge of emerging cybersecurity threats and technologies.
Benefits
- 401K plan with company match
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- AD&D insurance
- Flexible spending account
- Disability insurance
- Paid time off
- Flexible work schedule
- Professional training and development opportunities
