Information Systems Security Engineer 0 (ISSE0) (Government)

AT&T•Columbia, MD

3d•$72,000 - $167,900•Onsite

About The Position

AT&T Global Public Sector is seeking an Information Systems Security Engineer to support the RIS I team by performing vulnerability scans, analyzing scan results, and collaborating with framework teams to proactively manage cyber risk and enhance the organization's security posture through remediation of identified security weaknesses. This role will also support technical security assessments of computing environments and identification of non-compliance with established Information Assurance (AI) standards and regulations and recommend mitigation strategies. This position requires office presence a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Requirements

Knowledge of servers, virtualization, routers, switches, and firewalls as well as VLANS, routing and network segmentation.
Working knowledge of DoD STIGs, and RMF process (NIST 800-53).
Experience using Splunk for data ingestion, search queries, correlation, and report creation.
Active DoD 8570.01-M compliance with Information Assurance Technical (IAT) Level II (Sec+) or Information Assurance Systems Architect and Engineer (IASAE) Level 1 (CASP or CISSP) is required.
Excellent communication and teamwork skills.
Results oriented, high energy, and self-motivated.
Candidate may be required to respond to after-hours requests as required in a 24 x 7 environment.
Required Clearance: TS/SCI with polygraph.
Experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government is desirable.
Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required.
OR An Associate’s degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university and a technical certification such as Security + plus two (2) years of general IT experience.
OR Highschool Diploma/GED and four (4) years of general IT experience, at least one (1) of which must be information systems security experience.

Nice To Haves

Experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government.

Responsibilities

Configure, operate, and maintain Tenable.sc and Nessus to identify and track vulnerabilities across all environments.
Troubleshoot scans and/or coordinate with customer or program resources to resolve scanning issues.
Conduct STIG compliance scans and interpret results to assist system administrators and ISSEs to validate system hardening and control effectiveness.
Analyze vulnerability data and trends; create actionable findings and coordinate remediation efforts with system administrators and ISSEs.
May be required to perform job duties/responsibilities outside of normal work location.
Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated compliance reporting.
Develop dashboards and reports to visualize system risk posture and track remediation progress.
Support RMF (Risk Management Framework) activities, providing technical input for security controls (e.g., Tenable results).
Assist in developing or refining scanning policies, baselines, and SOPs to improve security posture and compliance consistency.
Support audits and assessments by providing detailed vulnerability data, remediation evidence, and STIG compliance documentation.
Implementing security vulnerability testing tools to provide continuous monitoring and patch verification.
Test and evaluate configurations in a lab environment.
Provide security operations support as needed.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone