Information System Security Engineer (Government)

AT&T•Chantilly, VA

4d•$158,200 - $237,400•Onsite

About The Position

AT&T Global Public Sector is hiring an Information System Security Engineer (ISSE) for its Integrity, Compliance & Risk Management Team. The role provides technical leadership in translating FISMA, the NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices for federal government services, including the FAA Enterprise Network Services (FENS) program. The ISSE guides services through the cybersecurity compliance lifecycle, from architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization. The ISSE is the primary manager and technical subject-matter resource for AT&T’s Tenable Security Center capability supporting Civilian, Department of Defense, State, and Local Government customers. The position owns the vulnerability-management lifecycle, including scan governance and coverage, finding analysis, risk-based prioritization, remediation coordination, metrics, reporting, and continuous process improvement. It applies technical knowledge of enterprise identity, servers, virtualization, logging, DNS/IP address management, and network technologies to assess exposure, address visibility and integration issues, and provide remediation guidance. The role works with infrastructure administrators, security operations teams, system owners, compliance personnel, assessors, and government stakeholders. It integrates Tenable results with Xacta-based continuous monitoring, findings, Plans of Action and Milestones, and authorization activities. The position requires independent technical judgment, process ownership, clear documentation and communication, and leadership of cross-functional vulnerability-management activities, with material risks and complex decisions escalated to senior leadership. This is a full-time, onsite position performed at the designated work location five days per week. No relocation is offered. The position is based in Chantilly, Virginia, with a 40-hour workweek.

Requirements

Bachelor’s degree.
Active CISSP certification.
Active Public Trust clearance is required; the posting indicates the role is clearable.
Hands-on experience with Tenable Security Center and enterprise vulnerability-management practices.
Strong expertise in identity and access management.
Ability to apply technical knowledge of enterprise identity, server, virtualization, logging, DNS/IP address management, and network technologies to vulnerability assessment and remediation guidance.
Ability to exercise independent technical judgment, own processes, document and communicate clearly, and lead cross-functional vulnerability-management activities.

Nice To Haves

CSM certification.
Security+ (Sec+) certification.
CCNA certification.
Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.
Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management.
Experience with the FEDRAMP and CMMC certification processes and deployment of certified cloud service offerings.

Responsibilities

Lead and continuously improve the enterprise vulnerability-management program using Tenable Security Center, ensuring governance, operational oversight, and risk-based security outcomes.
Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.
Own the vulnerability-management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
Integrate Tenable Security Center findings with Xacta 360 and ServiceNow workflows to support continuous monitoring, POA&M management, control evidence, risk tracking, remediation, and authorization reporting.
Analyze vulnerability data; validate findings; identify coverage gaps and credentialing issues; distinguish false positives from actionable risks; and provide remediation guidance to technical teams.
Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability-management processes, controls, and governance practices.
Develop executive dashboards, operational metrics, trend analysis, and decision-ready reports on security posture, remediation progress, and residual risk.
Establish and maintain vulnerability-management governance, including standard operating procedures, service-level objectives, escalation paths, evidence requirements, quality controls, and accountability mechanisms.
Use expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec to assess exposure and recommend risk-based remediation strategies.
Correlate vulnerability information with security events, asset inventories, identity data, privileged-access records, network telemetry, DNS/IPAM information, ServiceNow records, and Xacta 360 evidence to improve risk analysis and reporting accuracy.
Partner with infrastructure, security operations, application, compliance, and system-owner teams to resolve scan failures, integration issues, asset visibility gaps, and remediation challenges.
Evaluate infrastructure and security changes for impacts to vulnerability visibility, scan coverage, authentication, logging, compliance evidence, and continuous-monitoring requirements, and communicate risks and recommendations to leadership and stakeholders.

Benefits

Medical, dental, and vision coverage.
401(k) plan.
Tuition reimbursement program.
Paid time off and holidays, including at least 23 vacation days each year and 9 company-designated holidays, based on date of hire.
Paid parental leave.
Paid caregiver leave.
Additional sick leave may be available beyond state and local legal requirements; it is unprotected.
Adoption reimbursement.
Short- and long-term disability benefits.
Life and accidental death insurance.
Supplemental benefit programs, including critical illness, accident hospital indemnity, and group legal coverage.
Employee Assistance Programs (EAP).
Employee wellness programs.
Employee discounts of up to 50% on eligible AT&T mobility plans and accessories, AT&T internet (including fiber where available), and AT&T phone.