Information Systems Security Engineer with Security Clearance

Job Description: BOAB Ventures is seeking an experienced Information Systems Security Engineer (ISSE) to support mission-critical systems within a highly secure Department of Defense and Intelligence Community environment. This is a hands‑on security engineering position for someone who can go beyond documenting compliance requirements and actively design, implement, integrate, harden, and validate security controls within complex classified systems. The ideal candidate understands the intent behind cybersecurity requirements and can work directly with system administrators, software engineers, infrastructure teams, and government stakeholders to develop secure technical solutions that satisfy both mission and compliance objectives. What You’ll Do * Engineer and integrate cybersecurity controls throughout the system development lifecycle. Translate RMF, ICD 503, CNSSI 1253, and NIST SP 800-53 requirements into implemented and testable technical controls. Support systems through the ATO lifecycle, including development and validation of technical security evidence. Implement and validate DISA STIGs and Intelligence Community security baselines across Windows, Linux, network, and infrastructure environments. Conduct vulnerability assessment and remediation using tools such as ACAS, Nessus, SCAP, and related security technologies. Analyze STIG and security-control requirements to understand the underlying vulnerability and develop appropriate technical solutions, alternative implementations, or compensating controls when standard configurations conflict with mission requirements. Work directly with engineering and development teams to incorporate security into system architecture, infrastructure, applications, and deployment processes. Integrate cybersecurity requirements into DevSecOps and CI/CD environments where applicable. Engineer and validate security monitoring, logging, auditing, and continuous‑monitoring capabilities. Assess proposed system changes for security impact and recommend appropriate technical controls or remediation. Support secure cloud, on‑premises, containerized, and classified computing environments. Assist with incident response, vulnerability remediation, configuration management, and technical security investigations. Collaborate with ISSMs, ISSOs, system owners, engineers, developers, and government stakeholders throughout authorization and operational activities.