Information Systems Security Engineer Level 3 (Government)

AT&T • Columbia, SC

2d • Onsite

About The Position

AT&T Global Public Sector is seeking an Information Systems Security Engineer to join their team. This role involves performing and reviewing technical security assessments of computing environments to identify vulnerabilities and non-compliance with Information Assurance (IA) standards and regulations. The engineer will also recommend mitigation strategies and provide expert guidance on secure system development and maintenance. This is a full-time, onsite position located in Columbia, Maryland, requiring the employee to work from the designated location five days a week. No relocation assistance is provided.

Requirements

• Twenty (20) years of experience as an ISSE on programs and contracts of similar scope, type, and complexity.
• Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university.
• DoD 8570 compliance with IASAE Level 2 is required.
• Proficient in Microsoft Windows and Linux operating systems.
• Excellent written and verbal communication skills.
• Excellent leadership skills and teamwork skills.
• TS/SCI with polygraph clearance required.

Nice To Haves

• A Master’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline may be substituted for two (2) years of experience, reducing the requirement to eighteen (18) years of experience.
• Four (4) years of additional ISSE experience may be substituted for a Bachelor’s degree.

Responsibilities

• Provide expert guidance and work product evaluation to security engineers supporting the design, development, implementation, evaluation, and integration of secure networking, computing, and enclave environments.
• Advocate and recommend system-level solutions for the secure development and maintenance of systems.
• Monitor and suggest improvements to IA policy.
• Interact with customers, IT staff, and high-level corporate officers to define and achieve required IA objectives.
• Ensure the architecture and design of information systems are functional and secure, including program-of-record systems, new and proposed systems, and special purpose environments with platform IT interconnectivity.
• Prevent and provide early detection and resolution of risks to high value assets.
• Architect, design, implement, support, and evaluate security-focused tools and services.
• Provide software vulnerability remediation advice to software developers and development teams.
• Implement security vulnerability testing tools for continuous monitoring and patch verification.
• Test and evaluate products in a lab environment.
• Review certification and accreditation (C&A) documentation, providing feedback on completeness and compliance.
• Apply knowledge of 800-53 controls, testing information systems for compliance, and creating test cases.
• Apply knowledge of incident response, including creation, execution, and reporting.
• Apply knowledge of Firewalls, IDS/IPS, intrusion detection, VLANS, routing, and other network security technologies.
• Apply knowledge of virtualization technologies including virtual firewalls, networking, and segmentation.
• Apply knowledge of SIEM technologies such as Splunk and creation of security event related dashboards.
• Apply knowledge of Malware identification, containment, and eradication.
• Apply knowledge of access control systems, PKI, multi-factor authentication, and entitlements management.
• Provide input into the development of security policies and procedures.
• Evaluate and recommend new and emerging security products and technologies.
• Participate in projects that develop new intellectual property.
• Evangelize security within the organization and act as an advocate for customer trust.

Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone

What This Job Offers

• Job Type: Full-time
• Career Level: Senior