Security Software Engineer

Boeing•Swansea, IL

2d•Hybrid

About The Position

Tapestry Solutions, a part of Boeing Global Services (BGS), is seeking a Security Software Engineer in Swansea, IL or Mascoutah, IL. In this role you will provide security engineering support for Tapestry's Global Decision Support System (GDSS) program. GDSS is the primary US Air Force Air Mobility Command (AMC) Command and Control (C2) system and is a globally distributed enterprise class suite of applications designed, implemented and maintained by Tapestry Solutions. GDSS applications and services provide advanced mission planning, command and control for all phases of mobility operations (airlift, airdrop, and air refueling operations). You will assist with tasks to ensure secure operations in an AWS (Cloud One) environment in accordance with Department of War Cybersecurity requirements.

Requirements

Ability to obtain a U.S. Secret Clearance
Bachelor’s Degree or higher
CompTIA Security+ Certification
5+ years of experience implementing and sustaining secure development practices and operations, including scanning and vulnerability remediation
Must meet U.S. export control compliance requirements. To meet U.S. export control compliance requirements, a “U.S. Person” as defined by 22 C.F.R. §120.62 is required. “U.S. Person” includes U.S. Citizen, U.S. National, lawful permanent resident, refugee, or asylee.
An interim and/or final U.S. Secret Clearance Post-Start is required.

Nice To Haves

Prior experience supporting GDSS or MAFC2 Systems preferred

Responsibilities

Coordinate efforts to address quarterly Security Technical Implementation Guides (STIGs) issued by the Defense Information Systems Agency, and plans of action to reach compliance
Collaborate with DevOps, engineering, and compliance teams to integrate security controls into CI/CD pipelines
Identify, analyze, and remediate security vulnerabilities and misconfigurations in AWS environments
Monitor Nessus scan results and coordinate necessary remediation and burndown of findings
Monitor cloud security posture using AWS-native tools (e.g., AWS Security Hub, GuardDuty, Config) and third-party solutions including Trend Micro Deep Security
Implement and enforce AWS security best practices aligned with organizational policies and industry standards
Manage and maintain AWS security policies, including Identity and Access Management (IAM), security groups, and network ACLs
Design, deploy, and manage encryption solutions for data at rest and in transit within AWS environments
Develop and maintain documentation related to cloud security architecture, policies, and procedures
Stay current with emerging cloud security threats, vulnerabilities, and industry trends