Cybersecurity Operations Lead

[[JD_HEADING:Title Cybersecurity Operations]]

Lead At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries.

KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027.

Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions. Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world.

Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact. Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries.

KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027.

Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions. Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world.

Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact. Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment. KBR is seeking a Cybersecurity Operations Lead to join our team

The Security Operations Administrative

Lead serves as the administrative nerve center for the TRMC Headquarter’s cyber defense and test environment posture. In this capacity, you will track, process, and ensure organizational compliance with all Department of Defense Cyber Defense Command (DCDC) directives , Tasking Orders (TASKORDs), and daily Cyber Tasking Orders (CTO) issued by USCYBERCOM.

The Security Operations

Lead is responsible for managing a team of responders that aid in identifying, investigating, containing, and responding to cybersecurity incidents affecting the organization's systems, networks, cloud environments, and users.

The successful candidate will combine technical cybersecurity expertise with strong analytical, communication, and documentation skills to minimize risk and ensure timely response to cybersecurity threats.

Key Responsibilities

• Incident Detection & Response Systematically monitor, receive, track, and log all DCDC-issued directives, including Operational Orders (OPORDs), Fragmentary Orders (FRAGOs), and TASKORDs as well as user or third-party reported incidents.
• Manage the administrative pipeline to ensure TRMC network/program elements report compliance status within mandated timeframes.
• Perform initial triage and analysis of suspicious events and potential security incidents.
• Determine incident severity, scope, and business impact.

Contain security incidents through actions such as

Device isolation IP and domain blocking Escalate complex or high-severity incidents to senior security personnel. Incident Documentation Maintain detailed incident records and case documentation. Create incident reports detailing findings, actions taken, and business impact.

Ensure evidence is collected, preserved, and documented appropriately. Participate in post-incident reviews and lessons-learned sessions. Collaboration Coordinate with IT Operations, Service Desk, Infrastructure, Network, and Cloud teams during investigations.

Support major incident response activities and virtual war room operations during significant security events. Continuous Improvement Contribute to development of Cybersecurity Operations playbooks and response procedures. Recommend improvements to detection rules, monitoring coverage, and response workflows.

Assist in threat hunting and security control validation activities. Stay current with emerging threats, vulnerabilities, and industry best practices.

Required Qualifications

• Education Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or equivalent experience or, 2–5+ years of cybersecurity, SOC, incident response, or security operations experience.
• Familiarity with Windows, Linux, cloud platforms, and enterprise networking.
• Technical Skills Familiarity with SIEM technologies EDR/XDR platforms (Microsoft Defender, CrowdStrike, SentinelOne, Taegis, etc.)
• Identity platforms such as Active Directory and Entra ID Network protocols and traffic analysis Preferred Certifications TS/SCI Required GCIH (GIAC Certified Incident Handler) GCIA GCFA CISSP Security+ CySA+ SC-200 (Microsoft Security Operations Analyst) Working Conditions This is position is hybrid/remote and will require regular classified network access.
• Support for major cybersecurity incidents outside normal business hours.
• Ability to manage multiple concurrent security investigations Basic Compensation $158,000 - $198,000 (For DC Only) The offered rate will be based on the selected candidate’s knowledge, skills, abilities and/or experience and in consideration of internal parity.
• Additional Compensation KBR may offer bonuses, commissions, or other forms of compensation to certain job titles or levels, per internal policy or contractual designation.
• Additional compensation may be in the form of sign on bonus, relocation benefits, short term incentives, long term incentives, or discretionary payments for exceptional performance.
• KBR Benefits KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule.
• We support career advancement through professional training and development.
• Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture.
• These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company.
• That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow.
• We Deliver – Together.
• KBR is an equal opportunity employer.
• All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.
• R3000683