DHA Cyber Operations Center (CyOC) Event Response Action Officer

Title:

DHA Cyber Operations Center (CyOC) Event Response Action Officer

At KBR, we deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 37,000 people worldwide with customers in more than 85 countries and operations in over 28 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results.

Trinzic is the future independent company to be created through the planned spin-off of KBR's Mission Technology Solutions business, expected in January 2027. Our people work at the frontier of what is possible, delivering solutions in challenging environments and advancing some of the world's highest-priority national security and space missions.

Backed by decades of mission success, deep expertise, and trusted partnerships, Trinzic will launch as a global organization with more than 18,000 employees supporting customers around the world. Join us at a defining moment and help shape the future of a company built to tackle complex challenges and make a meaningful impact.

Candidates who join KBR's Mission Technology Solutions business before the spin-off will transition to Trinzic when the separation is complete and will not need to reapply for employment.

Title: DHA Cyber Operations Center (CyOC) Event Response Action Officer

The DHA Cyber Operations Center (CyOC) Operations Action Officer / Event Response Coordinator serves as a primary point of contact for Defense Health Agency (DHA) customers and stakeholders requiring cybersecurity assistance, while coordinating the monitoring, tracking, reporting, and resolution of cybersecurity incidents affecting DHA mission-relevant cyber terrain. Supporting the Naval Information Warfare Center (NIWC) Atlantic Defensive Cyberspace Operations (DCO) Integrated Product Team, the position coordinates cybersecurity activities across DHA, the Cybersecurity Service Provider (CSSP), DHA sites and facilities, DHA information technology organizations, and external entities as required. The incumbent provides timely customer support, real-time incident coordination, operational reporting, and process-improvement recommendations to help protect DHA information systems from unauthorized activity, vulnerabilities, threats, data leakage, and spillage events.

This role requires a strong understanding of cybersecurity operations, incident-response methodologies, DoW and DHA cybersecurity policy, and customer-service principles. The successful candidate will communicate technical information clearly to both technical and nontechnical audiences; maintain situational awareness throughout the incident lifecycle; and contribute to repeatable, efficient CyOC operational processes.

Responsibilities

• Customer Support: Serve as the initial point of contact for DHA customers seeking assistance with cybersecurity questions, concerns, and requests. Provide timely and accurate information, guidance, and solutions to customers regarding cybersecurity policies, procedures, tools, and best practices. Track and manage customer inquiries and requests to ensure timely resolution and follow-up.

• Cybersecurity Operations Support: Assist with daily CyOC operational tasks, including monitoring security tools, analyzing security events, and contributing to incident response activities. Identify and escalate potential security incidents or vulnerabilities to appropriate personnel. Support the development and maintenance of CyOC standard operating procedures (SOPs), playbooks, and knowledge base articles

• Continuous Improvement: Proactively identify and recommend improvements to CyOC processes, procedures, and customer support mechanisms. Stay abreast of emerging cybersecurity threats, vulnerabilities, and industry best practices. Participate in cybersecurity training, exercises, and working groups as required.

Basic Qualifications:

• Clearance: U.S Citizen with Minimum Active Secret clearance is mandatory with follow on SSBI for TS/SCI Eligibility.

• Education: Bachelor's degree in Computer Science, Cybersecurity, or a related field is preferred. Relevant cybersecurity, information assurance, or operational experience may be considered in lieu of a degree.

• Experience: Minimum of 2 years of experience in cybersecurity operations, industry-relevant stakeholder management or customer support, or a closely related field. Demonstrated experience in communicating technical information clearly and concisely to both technical and non-technical audiences. Experience with ticketing systems or other customer support platforms is a plus

• Solid understanding of cybersecurity principles, threats, and vulnerabilities.

• Familiarity with DoW and DHA cybersecurity policies and regulations.

• Knowledge of network security, operating systems, and common cybersecurity tools, as well as topology, protocols, components, and principles

• Knowledge of DoW cybersecurity policies, procedures, and regulations

• Knowledge of incident response and handling methodologies

• Ability to read, interpret, and implement technical policies and procedures related to information systems and information systems security

Preferred Qualifications:

• Certification and Experience: DoW 8570 IAT Level II certification (e.g., Security+, CySA+) or higher. Experience working in a Security Operations Center (SOC) environment. Knowledge of cloud security principles and technologies

Location: Charleston, SC

Position Type: Full time

Workplace Setting: This position operates on a standard Monday-Friday work schedule. Core hours are 0800 – 1630 ET. Requirement to be available for coordinated occasional operational surges as needed (~10% averaged annually). Place of duty are CyOC offices at NIWC Atlantic, proximally located vendor offices, and when permitted, from home via approved VPN/Remote technologies.

Travel: Travel may be required up to 25%

Minimum Security Clearance: Secret with SSBI for TS/SCI Eligibility

KBR Benefits: KBR offers a selection of competitive lifestyle benefits which could include 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, or flexible work schedule. We support career advancement through professional training and development.

Belong, Connect and Grow at KBRAt KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team’s philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver – Together.

KBR is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law.