Title:
Cybersecurity Practitioner
At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.
Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.
Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.
Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.
KBR is seeking a Cybersecurity practitioner with experience in software development, software assurance, and risk management to evaluate and verify third-party software deliverables, assess technical compliance reports, and provide risk-mitigation recommendations for Information Technology (IT) and Operational Technology (OT) systems. The successful candidate will join a team that evaluates cybersecurity policies and implements the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) to assess, authorize, and monitor system risks and ultimately ensure mission success for the customer. The successful candidate will conduct Static Application Security Testing (SAST) on source code and static binary analysis on compiled executables, assess scan reports to identify software weaknesses and prioritize mitigation plans, and maintain various security testing tools. The successful candidate will reverse engineer commercial and custom software to identify software flaws, logic defects, or undocumented embedded objects. The successful candidate will leverage expertise in Development, Security, and Operations (DEVSECOPS) and secure coding practices to provide technical support that effectively directs system security engineering for acquisition and sustainment programs. The successful candidate will develop and maintain custom software utilities to gather computer system information, consolidate logs and Security Content Automation Protocol (SCAP) results, generate visual metrics, and produce Continuous Monitoring (CONMON) artifacts.
REQUIREMENTS
The position requires at least three (3) years of experience in software engineering, software development or a cybersecurity-related field. Candidates must demonstrate an understanding of legacy and modern programming standards, secure coding principles, and risk management methodologies. Within six (6) months of the assignment, the candidate must possess or obtain one of the following certifications: CySA+, CGRC (formerly CAP), Security+, CISSP, SSCP, or CSSLP. The candidate must be familiar with secure coding and cybersecurity practices. Additionally, the candidate must be able to obtain and maintain a Secret or Top-Secret security clearance.
PREFERRED: A bachelor’s degree in Computer Science, Computer Engineering, Software Engineering, or Cybersecurity, and at least five (5) years of experience in related engineering or cybersecurity positions. Desired qualifications include hands-on experience with ICS/SCADA systems, vulnerability hunting, threat analysis, software reverse engineering, Ghidra, Binwalk, hardware debugging interfaces (e.g., JTAG, UART, I2C). Possession of one of the following certifications: CDP, CDE, CEH, CASE, GREM, or GICSP. Direct experience supporting USAF, military service, or military weapon systems is highly preferred. Must possess an active Secret or Top-Secret security clearance.
Belong, Connect and Grow at KBR
At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.
KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.
