Cybersecurity Engineering Manager

Title:

Cybersecurity Engineering Manager

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities.

Our KBR team in Colorado Springs, CO is seeking a Cybersecurity Engineering Manager, and your contributions will directly impact the success of our projects and the overall business outcomes we aim to achieve.

Key Responsibilities:

• Securing enterprise network boundaries by managing firewalls, enforcing strict access management, and monitoring high-volume data traffic for anomalies
• Performing analysis at all levels of the lifecycle, ensuring security posture is maintained from initial conceptualization through decommissioning
• Using encryption technology, penetration and vulnerability analysis of various security technologies, and conducting information technology security research
• Helping to direct end-to-end security operations that may include 
• Risk Management Framework (RMF) 
• Assessment & Authorization (A&A)
• Supporting Certificate to Field (CtF) activities
• Incident Response (IR)
• Disaster Recovery (DR)
• System hardening
• Defining security requirements
• Vulnerability scanning, research and testing
• Providing analytical support for development of the system security policy 
• Modernizing legacy infrastructures by integrating cloud native architecture and Zero Trust security features
• Making changes to security blueprints and artifacts 
• Providing architectural analysis of cyber security features and relating existing system to future needs and trends
• Embedding advanced forensic tools and techniques for attack reconstruction
• Providing engineering recommendations, and resolving integration and testing issues
• Analyzing and solving complex problems, which may include taking new perspectives to identify and recommend solutions/best practices
• May be required to advise multi-disciplinary teams or run projects

Work Environment:

• Location: On Customer Site
• Travel Requirements: Minimal
• Working Hours: Flexible

Qualifications:

Required:

• Security Clearance: Must possess an active U.S. government TS/SCI security clearance, which only a U.S. citizen can obtain
• Ability to obtain and maintain a JWICS, SAP/SAR clearance
• Education: BS/BA in a related field
• 7-9 years of experience
• Tertiary qualification in Cybersecurity, Computer Science, Engineering, Information Systems, or a related technical discipline
• DODM 8140.03 Cybersecurity Certification (Security+, CEH, CISSP, CISM, C|CISO, etc)
• Minimum 7–9 years’ experience in cybersecurity engineering, assurance, or governance within the Defense sector or another highly regulated technical environment.
• Demonstrated knowledge and practical application of Defense and international cybersecurity standards and frameworks 
• Proven experience leading or contributing to cybersecurity risk assessments, security design reviews, and system accreditation activities under Defense security frameworks
• Strong understanding of secure system architectures, information assurance principles, and cyber risk management across the system lifecycle
• Proficiency with cybersecurity management and monitoring tools such as SIEM, vulnerability management platforms, endpoint detection and response, and secure configuration baselines 
• Demonstrated knowledge in architecting and managing the Risk Management Framework (RMF) lifecycle, including the authoring and execution of System Security Plans (SSPs) and mission-critical documentation (ISSMP, CCR, SRMP) to secure formal Authorization to Operate (ATO) for Defense programs
• Strong analytical, organizational, and communication skills, with the ability to collaborate effectively across engineering, program management, and customer security teams
• Strong problem-solving skills 
• Experience with ATO process and procedures 
• Excellent written and verbal communication skills, with the ability to articulate risk posture, trends, and recommendations to diverse audiences
• Working knowledge of Agile, Agile XP, DevOps, and DevSecOps methodologies 
• Experience working with version control systems like Gitlab, Jira and Confluence

Desired:

• Experience in Defense acquisition and sustainment programs across the capability lifecycle, with emphasis on cyber and information assurance requirements
• Knowledge of the Australian Government Information Security Manual (ISM), DISP cyber se