> Markdown version of [/jobs/ext/3886716-senior-cybersecurity-analyst-information-systems-security-officer-isso](https://www.wearedevelopers.com/jobs/ext/3886716-senior-cybersecurity-analyst-information-systems-security-officer-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cybersecurity Analyst / Information Systems Security Officer (ISSO) - **Company:** TRINZIC CORP - **Location:** Colorado Springs, CO, United States - **Experience:** Expert - **Salary:** $120,000.0 - $140,000.0 - **Contract:** Permanent contract - **Skills:** Xacta, Configuration Management, Cyber Security, Network Segmentation, Software Vulnerability Management, System Availability, Cyber Warfare, Vulnerability Analysis - **Published:** October 23, 2026 - **Apply:** https://dejobs.org/x/x/165056BFEAB340BEBFD361A0A77AAD16/job/ ## About the Role * 5-10 years of experience * Top Secret SCI Clearance required * Bachelor's Degree (IT or Cybersecurity related) or equivalent related experience (Preferred) * DoD Directive (DoDD) 8140.01certification Security+ * Working knowledge of DoDRMF Rev.4 and/or 5, cyber technologies, NIST standards and DISA STIG governance * Experience with premise based isolated non-connected enclaves is preferred * Strong working knowledge of technical control implementation, security control tailoring, accreditation, verification and validation audit concepts, and defense-in-depth is required. * Experience with RMF controls, eMASS or XACTA, risk assessment, Plan of Actions and Milestones (POAMs), policy and plans documentation, Information Assurance Vulnerability Management (IAVM) and vulnerability assessment for mission systems required. * Effective interpersonal skills are required with a demonstrated ability to support complex organizational relationships * Excellent technical document preparation and verbal communication skills are Preferred Experience: * GSEC, SCNP, SSCP, CISSP, CISA or higher * Experience in cyber requirements design, development, implementation, deployment and remediation ## Description KBR is seeking a Senior Cyber Security Analyst/ Information Systems Security Officer. The individual will work in close coordination with current team members to ensure systems are operated, maintained, and disposed of in accordance with applicable security policies and procedures. Duties may include but are not limited to: * Manage and perform duties and activities necessary to achieve and maintain operationally secure posture of all AVAC networks, to include operating, sustaining, and maintaining all compliance requirements. * Development of all A&A documentation to include policies, plans, procedures, and other required artifacts throughout the life cycle of the systems. * Develop and manage tailored organizational security policies and procedures for controlling system environments to maintain security, but also to ensure system availability. * Develop and execute security control assessment procedures to verify conformance with control requirements as part of ongoing continuous monitoring and authorization assessment activities * Review and advise on updates, patches, and security technical implementation while maintaining control system performance and availability requirements. * Ensure configuration and collection of control system audit logs for monitoring and forensic analysis as appropriate. * Establish and maintain security configuration baseline for the control system(s), including field devices, IT components, interconnections, and interfaces. * Maintain knowledge of the function and security of control systems and IT technologies with which the control systems interface. * Maintain network segmentation to isolate control systems from business networks and other external connections as directed. * Perform network cyber inspections to define vulnerability of cyber requirements, conduct technical analysis, and provide reports recommending integration of cyber requirements, capabilities, and training. * Participate in control system change management in conjunction with IT personnel and control system experts (e.g., system supplier). * Identify problems, determine accuracy and relevance of a broad range of technical information. Use sound judgment to generate, evaluate, and execute alternative courses of action for remediation or mitigation of findings. * Produce timely, effective, decision-quality technical recommendations to support senior leadership risk acceptance. * Actively engage with a variety of customers and mission partners, anticipating their needs, and delivering flawlessly. * Conduct technical analyses and provide assessment reports on the integration of cyber requirements, capabilities and training, perform assessments of capability and the utility of new and emerging technologies, analyze assigned missions for capability gaps * Provide threat analysis, track relevant prioritized incidents, and provide recommendations in coordination with the overall AVAC Cyber Operations team. * Develop and perform tasks to execute Verification & Test plans to include delivering Risk Assessment Reports and Security Impact Assessments. * Support risk assessments by reviewing and documenting the implementation status of security requirements of control systems. * Development of all A&A documentation to include policies, plans, procedures, and other required artifacts throughout the life cycle of the systems. * Develop and maintain DoDRMF Rev 5. eMASS and Xacta packages and required ATO compliance tasking taskings. * Provide consultation to leadership on system security matters (e.g., risk assessment, configuration management) as needed. * Perform system design reviews for changes, upgrades, and recommendations for mitigation or remediation of POA&Ms. * Implement DOD and IC Risk Management Framework (RMF) Assessment requirements for control systems, and document/maintain records for them. * Develop and maintain system incident and disaster response, including secure system recovery. * Advise and coordinate with ISSM on the Cybersecurity Strategy and direction for the program. * Identify and define tailored organizational security policies and procedures for control system environments to maintain security, but also to ensure system availability.