Cyber Security / COMSEC Lead

Title:

Cyber Security / COMSEC Lead

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

Why Join Us? 

• Innovative Projects: At KBR, you'll be working on prototype projects that support the U.S. Air Force Research Laboratory’s most mission-critical objectives. The Air Force Research Laboratory is the primary scientific research and development center for the Department of the Air Force. AFRL plays an integral role in leading the discovery, development, and integration of affordable warfighting technologies for our air, space, and cyberspace force.  

• Collaborative Environment: KBR fosters a dynamic and collaborative atmosphere where cross-functional teams of product manager, engineers, developers, and defense experts work in unison. We practice Agile and DevOps principles, ensuring rapid iteration, continuous feedback, and integration across all projects. Our team is passionate, forward-thinking, and united by a mission-first mindset that encourages knowledge sharing, innovation, and problem-solving at every level. 

• Impactful Work: Your work here won’t just be limited to software development—it will directly support the Air Force in expanding current national capabilities. As the Air Force's leader for National-to-Tactical capability development, AFRL collaborates with leading experts across the Intelligence Community, Department of Defense, National Laboratories, industry, inter-agency, academia, and partner nations. 

Key Responsibilities:

• Architect, develop and implement out-of-the-box cyber solutions to meet warfighter needs
• Serve as a cybersecurity advisor to the Government and collaborate with system owners, architects, and developers to ensure end-to-end security
• Serve as the primary agent for all COMSEC material accountability
• Analyze customer requirements and identify the need for cybersecurity solutions
• Develop and maintain a deep understanding of the organization’s overall technology landscape
• Create and maintain documentation for systems, enclaves, applications, including design documents, implementation guides, standard operating procedures, and approval paperwork
• Oversee implementation of RMF, NIST SP 800-53, and STIG requirements, ensuring alignment with DoD security mandates
• Perform vulnerability assessments, support remediation, and manage incident response workflows and recovery operations
• Support security documentation, security control assessments, and continuous monitoring in alignment with FISMA
• Perform, evaluate and remediate SCAP, IAVAs, and emerging threat advisories to maintain hardened security posture
• Loading and managing cryptographic keys for High Assurance Internet Protocol Encryptors (HAIPE)
• Provide expert guidance in support of cyber audits, ATO packages, and continuous compliance processes
• Engage with customers to better define the problem space and vision to determine capabilities and priorities for prototypes
• Work across multiple technology stacks, gaining hands-on experience with various languages, frameworks, and tools to support a broad range of applications

 Work Environment:

• Location: Colorado Springs, CO – Hybrid or Onsite
• Travel Requirements: Minimal
• Working Hours: Flexible

Qualifications:

Required:

• Security Clearance: Must have an active U.S. government Top Secret security clearance with the ability to obtain SCI SI/TK, which is something only a U.S. citizen can obtain
• Education: BS degree in Computer Science or Information Systems. Other degrees will be considered with relevant work experience.
• 5–8 years of experience in COMSEC, Information Assurance (IA), or a technical engineering field
• One or more of the following certifications (must be current): CISM, CISSO, FITSP-M, GCIA, GCSA, GCIH, GSLC, GICSP, CISSP, CISSP-ISSMP
• DoD 8140/8570 IAT Level II or III certification (e.g., Security+), or ability to obtain within 6 months
• Experience managing cybersecurity projects of similar size and complexity in cloud environments (AWS, Azure, or VMware)
• Experience supporting ATO processes, POA&Ms, and cyber strategy development in federal or military environments
• At least eight (8) years of experience applying the DoD Risk Management Framework (RMF), including: NIST SP 800-53, DISA STIGs, SCAP and IAVAs, FISMA
• Proficiency