Verified Tech Jobs & Hiring Companies, Updated Every 24 Hours

Title: Cyber System Security Engineer (CSSE) Belong. Connect. Grow. with KBR! KBR’s National Security Solutions team provides high-end engineering and advanced technology solutions to our customers in the intelligence and national security communities. In this position, your work will have a profound impact on the country’s most critical role – protecting our national security. KBR is seeking a Cyber Security Engineer to join our team in El Segundo, CA. An active TS/SCI is required to be considered for this position. Why Join Us? Innovative Projects: KBR’s work is at the forefront of engineering, logistics, operations, science, program management, mission IT and cybersecurity solutions. Collaborative Environment: Be part of a dynamic team that thrives on collaboration and innovation, fostering a supportive and intellectually stimulating workplace. Impactful Work: Your contributions will be pivotal in designing and optimizing defense systems that ensure national security and shape the future of space defense. We are seeking an experienced Space Systems, Cyber System Security Engineer (SSE) to support the integration of cybersecurity, systems security engineering, information assurance, program protection, and risk-management activities for defense-critical systems and information-network environments. The SSE will ensure cybersecurity is engineered throughout the system life cycle from requirements definition, architecture, design, integration, and test through deployment, authorization, sustainment, modernization, and disposal. The SSE will support systems pursuing and maintaining an Authority to Operate (ATO) through the Risk Management Framework (RMF) process. The SSE serves as a principal cybersecurity and RMF Subject Matter Expert (SME) to the program manager, chief engineer, Information System Security Manager (ISSM), Information System Security Officer (ISSO), system owner, Authorizing Official (AO), configuration-control authorities, and program leadership. Key Responsibilities Systems Security Engineering and RMF - Apply systems security engineering principles across the system development life cycle in accordance with NIST SP 800-160 and applicable DoD acquisition and cybersecurity requirements. - Translate mission, cybersecurity, privacy, program-protection, cryptographic, supply-chain, and compliance requirements into system specifications, architecture artifacts, interface-control requirements, verification criteria, and test procedures. - Responsible for RMF activities, including system registration, categorization support, control selection and tailoring, control implementation, assessment support, authorization-package development, risk response, and continuous monitoring. - Develop, maintain, and update authorization artifacts in eMASS or other approved governance, risk, and compliance tools, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Security Control Traceability Matrices (SCTMs), Contingency Plans, Configuration Management Plans, and supporting evidence. - Provide technical cybersecurity risk assessments and recommendations to the ISSM, AO, program manager, and chief engineer regarding control deficiencies, residual risk, authorization dependencies, and risk-treatment options. - Participate in technical and program reviews, including requirements reviews, design reviews, test-readiness reviews, production-readiness reviews, and deployment decisions. SOW, CDRL, and Acquisition Support - Draft, review, and maintain cybersecurity and systems-security-engineering requirements for Statements of Work (SOWs), Performance Work Statements (PWSs), Statements of Objectives (SOOs), task orders, and acquisition documentation. - Develop and manage Contract Data Requirements List (CDRL) requirements for cybersecurity deliverables, including RMF packages, vulnerability reports, STIG checklists, cybersecurity test reports, software and firmware inventories, supply-chain documentation, and incident reports. - Ensure cybersecurity requirements are measurable, traceable, technically feasible, and aligned with program milestones, acceptance criteria, engineering baselines, and sustainment requirements. - Review contractor cybersecurity deliverables for completeness, technical adequacy, compliance, traceability, and readiness for government acceptance. - Support acquisition planning and source-selection activities by identifying cybersecurity risks, engineering dependencies, resource needs, and compliance requirements. Program Protection, Supply-Chain Risk, and Cryptography - Support Program Protection Plan development and execution, including identification and mitigation of threats to critical technologies, mission-critical functions, hardware, software, interfaces, and data. - Coordinate cybersecurity engineering with program protection, anti-tamper, software assurance, hardware assurance, supply-chain risk management, configuration management, and mission-assurance activities. - Identify attack surfaces, trust boundaries, critical assets, cybersecurity dependencies, and protective measures across system architectures and interfaces. - Support approved cryptographic solutions, encryption implementations, Public Key Infrastructure (PKI), certificate lifecycle management, key-management requirements, secure communications, and cryptographic modernization activities. - Coordinate with designated communications-security, cryptographic, engineering, cybersecurity, and program-protection personnel to document and manage cryptographic dependencies and associated risks. - Support compliance with applicable CNSS, NSA, DoD, DAF, and program requirements governing cryptographic products, services, key management, and secure communications. Continuous Monitoring, Vulnerability Management, and STIG Compliance - Conduct and oversee continuous-monitoring activities, vulnerability assessments, configuration assessments, security scans, compliance validation, and remediation tracking. - Use DISA STIGs, SRGs, SCAP Compliance Checker (SCC), ACAS/Nessus, endpoint-security tools, and manual validation procedures to assess system compliance. - Analyze Windows, Linux, network devices, applications, databases, cloud services, and enterprise infrastructure against approved security baselines. - Develop, document, coordinate, and validate remediation actions, compensating controls, mitigations, exceptions, and risk decisions for vulnerabilities and non-compliant security controls. - Create, maintain, and report Plans of Action and Milestones (POA&Ms), including risk ratings, milestones, accountable owners, remediation evidence, dependencies, and closure documentation. - Maintain continuous-monitoring plans, scan schedules, security metrics, compliance dashboards, and recurring cybersecurity status reports. Configuration Management, Audit, and Incident Support - Serve as the cybersecurity and systems-security-engineering representative on the Configuration Control Board (CCB) and other engineering governance forums. - Assess proposed hardware, software, firmware, network, interface, and operational changes for cybersecurity, RMF, STIG, cryptographic, supply-chain, and program-protection impacts before deployment. - Ensure approved changes are tested, documented, authorized as required, and reflected in system baselines, inventories, configuration-management records, and authorization artifacts. - Review audit logs, cybersecurity dashboards, and Security Information and Event Management (SIEM) reports, including Splunk reports where applicable, for unauthorized activity, anomalous behavior, and indicators of compromise. - Support cybersecurity incident identification, triage, containment, reporting, remediation, evidence preservation, and lessons-learned activities in accordance with applicable DoD and organizational procedures. IT Governance, eMASS, ITIPS, and FISMA Reporting - Demonstrate hands-on proficiency using **eMASS** to create, maintain, update, route, and track RMF authorization packages, control implementation statements, assessment evidence, POA&Ms, and continuous-monitoring artifacts. - Demonstrate working knowledge of **Information Technology Investment Portfolio Suite (ITIPS)**, the Department of the Air Force’s central database repository for tracking IT compliance and budgeting information. - Maintain accurate ITIPS records supporting IT investment management, IT compliance, budgeting, system inventories, and applicable FISMA reporting requirements. - Reconcile cybersecurity, authorization, inventory, budget, engineering, and compliance data among eMASS, ITIPS, program-management artifacts, CDRLs, configuration-management records, and other authoritative repositories. - Apply working knowledge of the **Clinger-Cohen Act**, FISMA, and associated DAF and DoD IT governance, portfolio-management, cybersecurity, and reporting processes. DAF reporting has used DITPR-related processes to capture compliance and investment information. Physical and Classified-System Security - Support applicable physical, environmental, access-control, media-protection, personnel-security, and system-security requirements. - Support security-control implementation for sensitive or classified environments, including secure facilities, controlled areas, removable media, system interconnections, and Cross Domain Solutions (CDS), when applicable. - Ensure account management, privileged access, audit logging, media handling, and operational security procedures remain aligned with approved system-security documentation. Required Qualifications Must have 5-10+ years of experience. - Active U.S. Government **Secret** security clearance required. - Top Secret eligibility or active Top Secret/Sensitive Compartmented Information eligibility preferred, based on program requirements. DoD 8140 Compliance - The candidate **must meet and maintain applicable DoD 8140 qualification requirements** for the assigned DCWF work role(s), workforce element, and proficiency level. - The candidate must maintain required foundational qualification, training, certification, education, and continuing professional development requirements applicable to the formally assigned role. - Relevant certifications may include CISSP, CISM, CGRC/CAP, Security+ CE, or other credentials recognized for the assigned work role; however, the specific qualification path must align with the position’s designated DCWF role and proficiency level. Compliance and Regulatory Framework: DoDI 8500.01; DoDI 8510.01; DoD 8140 and applicable DoD Cyber Workforce Framework (DCWF) qualification requirements; NIST SP 800-37; NIST SP 800-53; NIST SP 800-160, Volume 1; DoDI 5000.83; DoDI 5000.90; DoDI 8531.01; DISA Security Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs); Federal Information Security Modernization Act (FISMA); Clinger-Cohen Act; applicable Committee on National Security Systems (CNSS), National Security Agency (NSA), Department of Defense (DoD), Department of the Air Force (DAF), and program-specific requirements. Education and Experience - Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, Electrical Engineering, or a related discipline; additional directly relevant DoD cybersecurity, systems-engineering, or information-assurance experience may substitute for degree requirements. - At least 5 years of direct experience implementing RMF in accordance with DoDI 8510.01, NIST SP 800-37, NIST SP 800-53, and applicable DoD authorization processes. - Experience integrating cybersecurity requirements into system engineering, architecture, design, software development, integration, test, acquisition, configuration management, or sustainment activities. - Experience developing cybersecurity documentation, engineering analysis, SOW/PWS language, CDRLs, test requirements, security plans, assessment artifacts, and executive-level risk briefings. - Experience with vulnerability management, POA&M development, risk analysis, remediation planning, and compliance reporting. - Experience analyzing and securing Windows, Linux, network infrastructure, applications, databases, cloud services, or hybrid enterprise environments. Required Tools and Technical Knowledge - eMASS experience required. - Experience with ACAS/Nessus, SCC, DISA STIGs, SRGs, and vulnerability-management processes. - Familiarity with Splunk or comparable SIEM platforms, audit-log review, and incident-support processes. - Working knowledge of FISMA, Clinger-Cohen Act requirements, RMF, DoD cybersecurity governance, and DAF IT investment and portfolio-management processes. - Working knowledge of secure architecture, encryption, PKI, certificate management, access control, logging, boundary protection, secure configuration, and security testing. Preferred Qualifications - Experience supporting DAF, DoD, Intelligence Community, or other federal cybersecurity and systems-engineering programs. - Experience with Program Protection Plans, supply-chain risk management, anti-tamper, software assurance, hardware assurance, or critical-technology protection. - Experience with CMMC, FedRAMP, cloud-security authorization, Zero Trust implementation, DevSecOps, or container-security environments. - Familiarity with SCIF security operations, NISPOM requirements, ICD 503, Cross Domain Solutions, and classified-system authorization processes. - Experience participating in integrated product teams, engineering technical reviews, CCBs, cybersecurity working groups, or contractor performance reviews. - Strong technical writing and briefing skills, including the ability to communicate cybersecurity posture, engineering risk, compliance status, remediation priorities, and authorization recommendations to senior leaders. Scheduled Weekly Hours: 40 Basic Compensation: $150 -185k The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity. Additional Compensation: KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation. Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance. KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development. Ready to Make a Difference? If you’re excited about making a significant impact in the field of space defense and working on projects that matter, we encourage you to apply and join our team at KBR. Let's shape the future together. Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together. KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.

Title: Power BI Developer Power BI Developer LOCATION Riyadh, Saudi Arabia project description The project is a major infrastructure programme for a mixed-use development aiming to be a global landmark recognized for its unique vision and position as an authentic destination in Riyadh. The community will be a distinct, self-sustaining hub for Riyadh offering several iconic assets. KBR will provide PMO services, enterprise – level governance, assurance, integration and performance oversight across all projects and programs. THE ROLE Reporting to the Senior Manager Information Management / PMO Digital Lead, the Power BI Developer will be responsible for the design, development, implementation and maintenance of business intelligence solutions, dashboards and analytics platforms that support programme performance monitoring and executive decision-making. The Power BI Developer will transform complex programme data into meaningful visualizations and reports, enabling stakeholders to monitor project performance, identify risks and opportunities, and support data-driven decision-making across the PMO. MAIN RESPONSIBILITIES: Design, develop and maintain interactive Power BI dashboards, reports and scorecards for programme and project stakeholders. Gather and analyze reporting requirements from PMO, project controls, commercial, risk and programme management teams. Develop data models, data transformation processes and automated reporting solutions using Power BI, Power Query and DAX. Integrate data from multiple enterprise systems including project controls, scheduling, cost management, risk management and document management platforms. Ensure data accuracy, consistency and integrity across all reporting solutions. Develop KPI dashboards and executive reporting packs to support programme performance management. Collaborate with PMIS, digital and information management teams to optimize data architecture and reporting processes. Create automated workflows and reporting efficiencies that reduce manual intervention. Support data validation, quality assurance and testing of reporting solutions. Troubleshoot report performance issues and optimize datasets for scalability and reliability. Provide user training and technical support for Power BI reports and dashboards. Prepare technical documentation and maintain reporting standards and best practices. Support digital transformation initiatives and continuous improvement programmes across the PMO EXPERIENCE, SKILLS AND KNOWLEDGE: Bachelors Degree in Computer Science, Management Information Systems, Information Technology, or equivalent. Minimum 10 years of professional experience in business intelligence, reporting, data analytics or enterprise information management environments. Microsoft Certified: Power BI Data Analyst Associate (PL-300) certification is required, or equivalent certification. Extensive experience developing enterprise-level Power BI reports and dashboards. · Strong knowledge of Power BI Service, Power BI Desktop, DAX, Power Query and data modelling. · Experience integrating data from multiple data sources including SQL Server, Oracle databases, cloud platforms and enterprise applications. · Experience working within major infrastructure, construction, PMO or programme management environments. · Strong understanding of KPI development, performance reporting and executive dashboard design. · Experience developing automated reporting and business intelligence solutions. · Knowledge of data governance, data quality and reporting best practices. · Familiarity with project controls, scheduling, cost, risk and commercial management data structures is highly desirable. · Strong analytical and problem-solving skills with attention to detail. · Experienced user of Microsoft Office Suite and enterprise reporting platforms. · Excellent verbal and written communication skills in English. COMPETENCIES: · Business Intelligence Development · Data Analytics and Visualization · Data Modelling · Reporting and Dashboard Design · Problem Solving · Stakeholder Management · Quality Focus · Continuous Improvement · Planning and Organizing · Collaboration and Teamwork · Customer Focus · Data-Driven Decision Making