Information Systems Security Engineer

BOAB Ventures; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

BOAB Ventures seeks an experienced Information Systems Security Engineer to support mission-critical DoD and IC environments. This hands-on role goes beyond documenting compliance, designing, implementing, hardening, and validating security controls for complex classified systems.

You will collaborate with system administrators, software engineers, and government stakeholders to deliver secure technical solutions that meet mission and compliance objectives, spanning cloud, on-prem, and

Qualifications

• Hands-on security engineering for DoD/IC classified systems.
• Ability to translate requirements into tested security controls.
• Experience collaborating with ISSMs, ISSOs, and government stakeholders.

Responsibilities

• Engineer and integrate cybersecurity controls throughout the system development lifecycle.
• Translate RMF, ICD 503, CNSSI 1253, and NIST SP 800-53 requirements into implemented and testable technical controls.
• Support systems through the ATO lifecycle, including development and validation of technical security evidence.
• Implement and validate DISA STIGs and Intelligence Community security baselines across Windows, Linux, network, and infrastructure environments.
• Conduct vulnerability assessment and remediation using tools such as ACAS, Nessus, SCAP, and related security technologies.
• Analyze STIG and security-control requirements to understand the underlying vulnerability and develop appropriate technical solutions, alternative implementations, or compensating controls when standard configurations conflict with mission requirements.
• Work directly with engineering and development teams to incorporate security into system architecture, infrastructure, applications, and deployment processes.
• Integrate cybersecurity requirements into DevSecOps and CI/CD environments where applicable.
• Engineer and validate security monitoring, logging, auditing, and continuous-monitoring capabilities.
• Assess proposed system changes for security impact and recommend appropriate technical controls or remediation.
• Support secure cloud, on-premises, containerized, and classified computing environments.
• Assist with incident response, vulnerability remediation, configuration management, and technical security investigations.
• Collaborate with ISSMs, ISSOs, system owners, engineers, developers, and government stakeholders throughout authorization and operational activities.

Skills

ISSE

Security engineering

RMF

NIST SP 800-53

STIGs

Tools

ACAS

Nessus

SCAP

Job description

BOAB Ventures is seeking an experienced Information Systems Security Engineer (ISSE) to support mission-critical systems within a highly secure Department of Defense and Intelligence Community environment.

This is a hands-on security engineering position for someone who can go beyond documenting compliance requirements and actively design, implement, integrate, harden, and validate security controls within complex classified systems.

The ideal candidate understands the intent behind cybersecurity requirements and can work directly with system administrators, software engineers, infrastructure teams, and government stakeholders to develop secure technical solutions that satisfy both mission and compliance objectives.

What You'll Do

• Engineer and integrate cybersecurity controls throughout the system development lifecycle.
• Translate RMF, ICD 503, CNSSI 1253, and NIST SP 800-53 requirements into implemented and testable technical controls.
• Support systems through the ATO lifecycle, including development and validation of technical security evidence.
• Implement and validate DISA STIGs and Intelligence Community security baselines across Windows, Linux, network, and infrastructure environments.
• Conduct vulnerability assessment and remediation using tools such as ACAS, Nessus, SCAP, and related security technologies.
• Analyze STIG and security-control requirements to understand the underlying vulnerability and develop appropriate technical solutions, alternative implementations, or compensating controls when standard configurations conflict with mission requirements.
• Work directly with engineering and development teams to incorporate security into system architecture, infrastructure, applications, and deployment processes.
• Integrate cybersecurity requirements into DevSecOps and CI/CD environments where applicable.
• Engineer and validate security monitoring, logging, auditing, and continuous-monitoring capabilities.
• Assess proposed system changes for security impact and recommend appropriate technical controls or remediation.
• Support secure cloud, on-premises, containerized, and classified computing environments.
• Assist with incident response, vulnerability remediation, configuration management, and technical security investigations.
• Collaborate with ISSMs, ISSOs, system owners, engineers, developers, and government stakeholders throughout authorization and operational activities.