> Markdown version of [/jobs/ext/2222029-information-systems-security-engineer-isse](https://www.wearedevelopers.com/jobs/ext/2222029-information-systems-security-engineer-isse). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Engineer (ISSE) - **Company:** KBR Inc - **Location:** Chantilly, VA, United States - **Experience:** Expert - **Salary:** $168,100.0 - $205,400.0 - **Contract:** Permanent contract - **Skills:** Configuration Management, Cyber Security, Information Systems, Network Security, Network Planning and Design, Systems Architecture, Software Vulnerability Management, Cyber Threat Analysis, Information Technology, Vulnerability Analysis - **Published:** August 25, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9115011/information-systems-security-engineer-isse ## About the Role * Active TS/SCI with a Polygraph * Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related technical field and 8+ years of relevant experience. Additional experience may be substituted for a degree. * Prior experience as an Information Systems Security Engineer (ISSE) * Experience supporting Assessment & Authorization (A&A), Risk Management Framework (RMF), and cybersecurity compliance activities. * Strong understanding of computer architecture, networking, operating systems, and network security principles. * Experience conducting vulnerability assessments, security reviews, remediation activities, and continuous monitoring. * Demonstrated ability to develop, review, and maintain cybersecurity documentation and accreditation artifacts. Desired: * Experience with multi-enclave architectures and differing classification requirements. * Professional cybersecurity certification such as CISSP, CASP+, Security+, GSLC, or equivalent. * Experience supporting enterprise vulnerability management and configuration management programs. * Experience working closely with ISSMs, network engineers, and system administrators to resolve cybersecurity findings. ## Description * Design, implement, and integrate cybersecurity controls and information assurance solutions across network, computing, virtualization, cloud, and enclave environments. * Lead and support Assessment & Authorization (A&A) activities, including development, review, and maintenance of RMF artifacts, accreditation documentation, standard operating procedures, and security plans. * Conduct vulnerability assessments, compliance reviews, and security scans; coordinate remediation activities with system administrators and developers to resolve vulnerabilities, policy violations, and security findings. * Review system architectures, network designs, and technical implementations to identify cybersecurity risks, recommend mitigation strategies, and ensure compliance with sponsor and regulatory requirements. * Partner with ISSMs, system owners, and engineering teams to maintain secure system baselines, configuration management controls, continuous monitoring activities, and approved change management processes. * Develop and maintain operational and cybersecurity documentation, including concepts of operation, operations and maintenance procedures, scan results, security event monitoring policies, and authorization evidence packages. * Monitor, analyze, and respond to cybersecurity threats, vulnerabilities, and potential intrusion activity to protect systems and information from unauthorized access, disclosure, modification, or disruption. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [What is Software Engineering?](https://www.wearedevelopers.com/magazine/289-what-is-software-engineering) - [Software Engineer Career: Things You Should Know](https://www.wearedevelopers.com/magazine/143-software-engineer-career-things-you-should-know) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)