Information Systems Security Officer (ISSO) Skill Level 1 (Government)

AT&T•Columbia, MD

10d•$98,100 - $156,530•Onsite

About The Position

AT&T Global Public Sector is seeking an Information Systems Security Officer (ISSO) to support information assurance programs and ensure the security posture of mission-critical systems. The ISSO will play a key role in supporting security authorization activities in alignment with program and government requirements. This role requires specialized expertise in areas such as high-performance computing, automated processing systems, distributed software design, and secure hosting and networking solutions, primarily within a Linux environment. The position involves supporting the Information System Security Manager (ISSM) and senior ISSOs in implementing and enforcing security policies, maintaining the security posture of classified information systems, supporting Risk Management Framework (RMF) activities, managing security-relevant configuration control, and developing cybersecurity documentation in accordance with ODNI and DoD requirements. The work is to be performed at a government customer site.

Requirements

Five (5) years of experience as an ISSO on programs and contracts of similar scope, type; and complexity is required.
Bachelor's degree in Computer Science or related discipline from an accredited college or university is required.
Four (4) years of additional experience as an ISSO may be substituted for a bachelor's degree.
Experience is to include at least one (l) of the following areas: knowledge of current security tools, hardware/software security implementation; communication protocols; and encryption techniques/tools.
DOD 8570 compliance with IAT Level I or higher is required.
Required Clearance: TS/SCI with polygraph.
Working knowledge of NIST SP 800-53 (Rev. 3 and/or Rev. 5) and NIST SP 800-37; understanding of the full RMF lifecycle, including Authority to Operate (ATO) and continuous monitoring.
Experience supporting information assurance/cybersecurity operations for systems processing classified information.
Hands-on experience with RMF execution, security control implementation, and security authorization (ATO) support.
Experience producing and maintaining RMF artifacts and supporting audits, assessments, and continuous monitoring activities.
Strong written communication skills to produce clear, complete, and compliant security documentation.
Ability to coordinate across ISSM/ISSO, system owners, engineering, and operations teams to implement controls, manage change, and sustain compliance.

Nice To Haves

RMF and RMF toolsets (e.g., LATTEART, XACTA, BISCOTTI, WATCHCAT, STE).
Compliance and configuration scanning tools (e.g., SCAP-based and host/network scanning solutions).
Security documentation development and maintenance (e.g., SSP, POA&M, Security Plan for Exceptions/waivers, BIA, Configuration Management Plan (CMP), After Action Report (AAR), Contingency Plan (CP), Security Assessment Report (SAR), Risk Assessment Report (RAR)).

Responsibilities

Support senior ISSOs in implementing and enforcing information systems security policies, standards, and methodologies.
Maintain the operational security posture of classified information systems, including support for continuous monitoring activities.
Develop system security policy and ensure compliance with applicable requirements.
Evaluate security solutions to ensure they meet security requirements for processing classified information.
Assist with the management of security aspects of information systems and perform day-to-day security operations.
Administer user identification and authentication mechanisms for information systems, including privileged user oversight.
Provide configuration management (CM) for security-relevant information system software, hardware, and firmware; coordinate and assess security impact of changes.
Maintain records for workstations, servers, routers, firewalls, intelligent hubs, network switches, and related components, including system upgrades.
Develop, update, and maintain RMF/IA documentation (e.g., SSP) and supporting artifacts; keep documentation accurate and audit-ready.
Collaborate with System Administrators (SA), System Owners, and other stakeholders to implement controls, manage change, and sustain compliance.
Support control selection/tailoring and coordinate security control assessments with technical and program stakeholders.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays) Pro-rated when working less than 40 hrs/wk.
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone