Lead Security Engineer in Suitland

Overview

Lead Security Engineer – at B&A, we value dedication, commitment, partnership, trust, and recognition. This role supports a large-scale, cloud-based federal modernization program for the U.S. Census Bureau’s DTAM effort, embedding security across the SDLC using a Dev Sec Ops  approach.

• Lead the design and implementation of application security solutions, frameworks, and processes across all SDLC phases, in line with USCB and OIS policies.
• Apply Zero Trust principles for applications, workloads, and data; align with EO 14028, OMB M-22-09, and NIST SP 800-207.
• Integrate security into Dev Sec Ops  CI/CD pipelines with security gates, automated code inspection, and SBOM controls.
• Direct SAST/DAST, vulnerability assessments, and penetration testing to identify, triage, and remediate weaknesses.
• Lead threat modeling to analyze architecture, identify attack vectors, and document mitigations throughout design, development, testing, and deployment.
• Support the Authorization to Operate (ATO) process, including control assessment, artifact collection, Privacy Threshold/PIA support, and POA&M management.
• Implement controls per the NIST Cybersecurity Framework and NIST SP 800-53; remediate findings.
• Design secure architecture patterns (secure API design, authentication/authorization, input validation, encryption, secure logging/monitoring, and secure error/session/configuration management).
• Develop and maintain metrics, dashboards, and reports to track security posture, threat trends, and remediation progress.
• Support ISA development, security playbooks, and incident response per current policies; collaborate with developers, data engineers, systems engineers, and OIS to mitigate vulnerabilities.
• Assist in FedRAMP certification activities and assessment/remediation of penetration testing results, as applicable.

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or related field.
• 15+ years of relevant IT/cybersecurity experience with SME-level leadership on major tasks or technology assignments.

• Experience integrating security into a Dev Sec Ops  SDLC with CI/CD security gates and automated testing.
• Hands-on experience implementing Zero Trust Architecture and applying NIST SP 800-53 controls and the NIST Cybersecurity Framework.
• Proven experience leading vulnerability assessments, penetration testing, and threat modeling for enterprise applications.
• Experience supporting the ATO lifecycle and managing POA&Ms, security artifacts, and evidence collection.

• Required: CISSP, CCSP
• Desired: CISM, CISA

• Experience generating Software Bill of Materials (SBOMs) and implementing software supply-chain security controls.
• Familiarity with SIEM deployment, container/image hardening, and secure baseline configuration.
• Experience in large-scale, multi-cloud federal environments and FedRAMP processes.
• Strong analytical, problem-solving, written, and verbal communication skills, including briefing senior Government stakeholders.

• U.S. Citizenship required.

B&A provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, or other protected characteristics, in accordance with applicable laws.