Information System Security Engineer (Government)

AT&T•Chantilly, VA

3d•Onsite

About The Position

AT&T Global Public Sector is seeking an Information System Security Engineer (ISSE) to provide technical leadership for cybersecurity compliance and authorization activities supporting the Federal Aviation Administration Enterprise Network Services program and other government customers. The role translates FISMA, the NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices across the compliance lifecycle, from architecture and control design through assessment, Authorization to Operate, continuous monitoring, and ongoing authorization. The ISSE serves as the primary manager and technical subject-matter resource for AT&T’s Tenable Security Center capability. The role owns the vulnerability-management lifecycle, including scan governance, coverage, finding analysis, risk-based prioritization, remediation coordination, metrics, reporting, and process improvement. It applies technical knowledge of enterprise identity, servers, virtualization, logging, DNS/IP address management, and networking to evaluate exposure, address visibility and integration issues, and advise on remediation. Working with infrastructure administrators, security operations, system owners, compliance personnel, assessors, and government stakeholders, the ISSE integrates Tenable results with Xacta-based continuous monitoring, findings, Plans of Action and Milestones, and authorization activities. The position requires independent technical judgment, process ownership, clear documentation and communication, and leadership of cross-functional vulnerability-management activities, with material risks and complex decisions escalated to senior leadership. This is a full-time, onsite position in Chantilly, Virginia, performed at the designated work location five days per week. No relocation is offered.

Requirements

Bachelor’s degree.
Active CISSP certification.
Active Public Trust clearance is required, as stated in the posting.
The posting describes the role as full-time and onsite five days per week in Chantilly, Virginia.
The role requires technical expertise in enterprise identity, servers, virtualization, logging, DNS/IP address management, and network technologies.
The role requires independent technical judgment, process ownership, clear documentation and communication skills, and the ability to lead cross-functional vulnerability-management activities.

Nice To Haves

CSM certification.
Security+ certification.
CCNA certification.
Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.
Hands-on experience with Tenable Security Center and enterprise vulnerability-management practices.
Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management.
Strong expertise in identity and access management.
Experience with the FedRAMP and CMMC certification processes and deployment of certified cloud service offerings.

Responsibilities

Lead and continuously improve the enterprise vulnerability-management program using Tenable Security Center, ensuring effective governance, operational oversight, and risk-based security outcomes.
Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.
Own the vulnerability-management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
Integrate Tenable Security Center findings with Xacta 360 and ServiceNow workflows to support continuous monitoring, POA&M management, control evidence, risk tracking, remediation activities, and authorization reporting.
Analyze vulnerability data; validate findings; identify coverage gaps and credentialing issues; distinguish false positives from actionable risk; and provide remediation guidance to technical teams.
Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability-management processes, controls, and governance practices.
Develop executive dashboards, operational metrics, trend analysis, and decision-ready reporting on security posture, remediation progress, and residual risk.
Establish and maintain vulnerability-management governance, including standard operating procedures, service-level objectives, escalation paths, evidence requirements, quality controls, and accountability mechanisms.
Use expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec to assess exposure and recommend risk-based remediation strategies.
Correlate vulnerability information with security events, asset inventories, identity data, privileged-access records, network telemetry, DNS/IPAM information, ServiceNow records, and Xacta 360 evidence to improve risk analysis and reporting accuracy.
Partner with infrastructure, security operations, application, compliance, and system-owner teams to resolve scan failures, integration issues, asset visibility gaps, and remediation challenges.
Evaluate infrastructure and security changes for impacts to vulnerability visibility, scan coverage, authentication, logging, compliance evidence, and continuous-monitoring requirements; communicate risks and recommendations to leadership and stakeholders.
Escalate material risks and complex decisions to senior leadership.

Benefits

Medical, dental, and vision coverage.
401(k) plan.
Tuition reimbursement program.
Paid time off and holidays, including at least 23 vacation days each year and 9 company-designated holidays, based on date of hire.
Paid parental leave.
Paid caregiver leave.
Additional sick leave may be available beyond what state and local law require; it is unprotected.
Adoption reimbursement.
Short-term and long-term disability benefits.
Life and accidental death insurance.
Supplemental benefits, including critical illness, accident, hospital indemnity, and group legal programs.
Employee Assistance Programs (EAP).
Employee wellness programs.
Employee discounts of up to 50% on eligible AT&T mobility plans and accessories, AT&T internet (including fiber where available), and AT&T phone.