Information Systems Security Engineer (ISSE1) (Government)

AT&T • Columbia, SC

25d • Onsite

About The Position

AT&T Global Public Sector is seeking an Information Systems Security Engineer (ISSE) to support the team by performing or reviewing technical security assessments of computing environments to identify points of vulnerability, non-compliance with established Information Assurance (AI) standards and regulations, and recommend mitigation strategies. This is a full-time onsite role based in Columbia, Maryland, performed from the designated work location five days per week. No relocation is offered. The role involves serving as the technical security engineer for assigned systems and System Security Plans (SSPs), ensuring full lifecycle RMF compliance, and providing technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring efforts. The ISSE will implement and validate security controls from NIST SP 800-53, serve as a technical security liaison with technology frameworks, and ensure all controls are properly mapped, implemented, and tested within the Security Control Traceability Matrix (SCTM). Collaboration with the vulnerability scanning team (e.g., Tenable operators) is crucial for scan compliance, addressing findings, retesting, and accurately reflecting the system’s risk posture. The role also supports continuous monitoring activities, including vulnerability tracking and control reassessments, and coordinates with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and Plan of Action & Milestones (POA&M) items. The ISSE will lead or support reauthorization efforts, evaluate and document security-relevant changes, and interface with the Security Architect to ensure alignment with approved architectures and customer mandates. Testing and evaluating configurations in a lab environment is also part of the responsibilities. The position requires knowledge of servers, virtualization, routers, switches, firewalls, VLANS, routing, and network segmentation, along with demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms. A solid understanding of continuous monitoring, reauthorization, and configuration management processes is necessary, as is hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools. Knowledge of Windows, Linux, and network security controls implementation is required. The role may also involve providing security operations support as needed. Excellent communication and teamwork skills are essential, as is a willingness to train junior team members. The candidate should be results-oriented, high energy, and self-motivated. The candidate may be required to respond to after-hours requests in a 24 x 7 environment. A TS/SCI with polygraph clearance is required.

Requirements

• Seven (7) years’ experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government is required.
• Bachelors degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required.
• Four (4) years of additional ISSE experience may be substituted for a bachelor’s degree.
• DoD 8570 compliance with IASAE Level 2 is required.
• Knowledge of servers, virtualization, routers, switches, and firewalls as well as VLANS, routing and network segmentation.
• Demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms.
• Solid understanding of continuous monitoring, reauthorization, and configuration management processes.
• Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools.
• Knowledge of Windows, Linux, and network security controls implementation.
• Excellent communication and teamwork skills.
• Results oriented, high energy, self-motivated.
• TS/SCI with polygraph clearance.

Nice To Haves

• Python

Responsibilities

• Serve as the technical security engineer for assigned systems and System Security Plans (SSPs), ensuring full lifecycle RMF compliance.
• Provide technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring efforts.
• Implement and validate security controls from NIST SP 800-53 and serve as technical security liaison with technology frameworks to complete.
• Ensure all controls are properly mapped, implemented, and tested within the Security Control Traceability Matrix (SCTM) and respond to Security Assessment Report (SAR).
• Collaborate with the vulnerability scanning team (e.g., Tenable operators) to ensure scan compliance, findings are addressed, retested, and reflected accurately in the system’s risk posture.
• Support continuous monitoring activities, including vulnerability tracking, control reassessments, and serve as technical security liaison with technology frameworks.
• Coordinate with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and Plan of Action & Milestones (POA&M) items.
• Lead or support reauthorization efforts, ensuring all system technical artifacts are updated, validated, and submitted on schedule.
• Evaluate and document security-relevant changes, assessing configuration updates, patches, or system modifications for RMF impact.
• Interface with Security Architect to ensure designs, configurations, and security mitigations align with approved architectures and customer mandates.
• Work with Technology Framework teams to complete all system documentation.
• Test and evaluate configurations in a lab environment.
• Provide security operations support as needed.
• Train junior team members.

Benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level