Systems Engineer with Security Clearance

BOAB Ventures; Herndon (VA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Flexible time off

Full medical coverage

401(k) with company match

Referral bonuses

Performance bonuses

Life insurance and disability coverage

Tuition and training reimbursement

Job summary

BOAB Ventures seeks a Systems Engineer to support enterprise-wide cloud security, compliance, and risk management across AWS, Azure, GCP, and OCI.

This role covers security assessments, authorization and accreditation, continuous monitoring, and change management, requiring strong technical and coordination skills.

You will work with cloud providers and internal teams, prepare reports, and contribute to improving system security posture.

Qualifications

• Experience in cloud environments (AWS, Azure, GCP, or OCI).
• Experience performing security assessments in cloud/enterprise systems.
• Familiarity with security scanning tools (Rapid7, Nessus, Qualys).
• Experience tracking security risks and POA&Ms (Plan of Actions and Milestones).
• Understanding of cloud security frameworks and controls (NIST RMF, NIST 800-53).
• Experience supporting system security or cloud architecture reviews.
• Ability to interpret security findings and translate them into remediation steps.
• Strong communication for technical documentation and stakeholder coordination.

Responsibilities

• Support security assessment, compliance, and continuous monitoring across multi-cloud environments (AWS, Azure, GCP, OCI).
• Evaluate cloud systems for vulnerabilities, security gaps, and compliance with federal and industry standards.
• Perform vulnerability scans using Rapid7, Nessus, and Qualys and recommend remediation actions.
• Support cloud A&A activities, including review of security documentation and control evidence.
• Manage and track security risks, including POA&Ms and remediation timelines.
• Collaborate with cloud providers and internal teams to assess architecture and security posture.
• Participate in TEMs to review cloud designs and security implementations.
• Maintain compliance dashboards, metrics, and reporting on system security posture and risk status.
• Prepare technical reports, risk summaries, and leadership briefings.
• Coordinate security tasks, milestones, and cross-team initiatives.

Skills

Cloud security

Vulnerability assessment

NIST RMF

Stakeholder coordination

Technical communication

Tools

Rapid7

Nessus

Qualys

Job description

Job Description

We are seeking a Systems Engineer to support enterprise-wide cloud security, compliance, and risk management activities across multiple cloud service providers, including Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). This role is responsible for supporting security assessment, authorization (A&A) activities, continuous monitoring, and change management processes in alignment with federal cybersecurity frameworks and Sponsor security requirements. The position requires strong technical expertise in cloud security architecture, risk analysis, and compliance documentation, as well as the ability to coordinate across technical teams, stakeholders, and external cloud service providers.

Duties & Responsibilities:

• Support security assessment, compliance, and continuous monitoring across multi-cloud environments (AWS, Azure, GCP, OCI)
• Evaluate cloud systems for vulnerabilities, security gaps, and compliance with federal and industry security standards
• Perform vulnerability and scan analysis using tools such as Rapid7, Nessus, and Qualys, and recommend remediation actions
• Support cloud Authorization & Accreditation (A&A) activities, including review of security documentation and control evidence
• Manage and track security risks, including POA&Ms and remediation timelines
• Collaborate with cloud providers and internal teams to assess system architecture and security posture
• Participate in Technical Exchange Meetings (TEMs) to review cloud designs and security implementations
• Support security control assessments and system security engineering activities
• Maintain compliance dashboards, metrics, and reporting on system security posture and risk status
• Prepare technical reports, risk summaries, and leadership briefings
• Support coordination of security tasks, milestones, and cross-team initiatives

Required Skills Requirements:

• Experience working in cloud environments (AWS, Azure, Google Cloud, or Oracle Cloud)
• Experience performing security or vulnerability assessments in cloud or enterprise systems
• Familiarity with security scanning tools (e.g., Rapid7, Nessus, Qualys)
• Experience tracking and managing security risks and remediation items (POA&Ms or equivalent)
• Understanding of cloud security frameworks and controls (e.g., NIST RMF, NIST 800-53)
• Experience supporting system security or cloud architecture reviews
• Ability to interpret security findings and translate them into actionable remediation steps
• Strong communication skills for technical documentation and stakeholder coordination

Desired Skills Preferred Qualifications:

• Experience supporting federal or highly regulated cloud environments
• Familiarity with Authorization & Accreditation (A&A) or similar security approval processes
• Experience working with cross-functional engineering and security teams
• Exposure to compliance reporting, dashboards, or security metrics
• Experience supporting security engineering or DevSecOps activities
• Experience using security or governance tools (e.g., Xacta 360, RSA Archer, RiskVision)

Additional Details What we offer:

• Flexible time off
• Full medical coverage
• 401(k) with company match
• Referral bonuses
• Performance bonuses
• Life insurance and disability coverage
• Tuition and training reimbursement