Senior DevSecOps Cybersecurity Engineer

Title:

Senior DevSecOps Cybersecurity Engineer

Belong. Connect. Grow. with KBR!

KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security.

KBR is seeking a motivated and experienced Senior DevSecOps Cybersecurity Engineer to join our team. The primary work locations are El Segundo, CA and Colorado Spring, CO, but work-from-home flexibility is available. This role serves as a senior cybersecurity practitioner embedded within Agile and DevSecOps development teams responsible for delivering capabilities into government-owned production environments operating at IL5 and IL6.

The Cybersecurity Engineer will work closely with software developers, cloud engineers, mission owners, systems engineers, Information System Security Managers (ISSMs), Authorizing Officials (AOs), and government cybersecurity personnel to ensure software releases meet security, compliance, and operational requirements.

The position requires deep expertise in RMF implementation, vulnerability management, CVE assessment and remediation, secure deployment methodologies, and cybersecurity activities necessary to support Authority to Operate (ATO) accredited environments.

The successful candidate must be capable of explaining cybersecurity risk to both technical and non-technical stakeholders, developing mitigation strategies for identified vulnerabilities, and ensuring mission capabilities can be rapidly and securely deployed into operational environments.

This role is a senior cybersecurity and RMF expert embedded within DevSecOps software delivery teams responsible for enabling secure deployment of mission capabilities into accredited IL5 and IL6 production environments. The emphasis is on CVE analysis and remediation, RMF execution, cybersecurity documentation, deployment approval activities, security compliance, and effective communication of cyber risk to government stakeholders while enabling rapid and secure mission capability delivery.

KBR (formerly LinQuest) is the prime contractor on the Military Satellite Communications (MILSATCOM) Systems Engineering, Integration and Test (MSEIT) contract. The MSEIT effort provides leading-edge Systems Engineering & Integration (SE&I) for the United States Space Force’s (USSF) Space Systems Command (SSC). We acquire state-of-the-art Military and Commercial Satellite Communications (SATCOM) systems, providing global, secure, survivable, and protected communications for our nation’s warfighters. We seek technical individuals who will thrive in a highly collaborative work environment of small teams, using the most modern tools and methodologies to tackle the challenges of integrating complex space and ground communications systems.

Why Join Us?

• Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions.
• Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace.
• Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense.

Work Environment:

• Location: El Segundo, CA or Colorado Springs, CO (work-from-home flexibility with on-site support as required)
• Travel Requirements: Minimal
• Working Hours: Standard

Responsibilities

Cybersecurity Engineering

• Serve as the primary cybersecurity engineering lead supporting DevSecOps software delivery efforts.
• Provide cybersecurity guidance throughout the software development lifecycle from design through production deployment.
• Evaluate system architectures, software components, and deployment pipelines for compliance with DoD and Department of the Air Force cybersecurity requirements.
• Partner with development, platform, cloud, and infrastructure teams to ensure security is integrated into all phases of delivery.

CVE Analysis & Remediation

• Assess Common Vulnerabilities and Exposures (CVEs) identified through automated scanning, security testing, and cybersecurity reviews.
• Analyze operational impact, exploitability, mission risk, and remediation options for vulnerabilities affecting mission systems.
• Develop mitigation strategies and Plans of Action and Milestones (POA&M) recommendations when immediate remediation is not feasible.
• Provide technical jus