Senior Information Systems Security Engineer (Government)

AT&T•Reston, VA

16h•Onsite

About The Position

This position requires office presence of a minimum of 5 days per week and is only located at customer's site. AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission. TAC2O (Technology Architecture for Command and Control Operations) is a five-year Task Order under the Helios IDIQ awarded to AT&T in December 2023. AT&T’s TAC2O contract provides a team of IT specialists who perform IT Engineering, Cybersecurity; Communications Security, Systems Administration, Software Development, SharePoint Development and Administration, and Program Management services supporting sensitive technical collection and exploitation missions and focused on driving optimization of performance and cost over time across multiple security domains. AT&T has an opening for an Senior Information Systems Security Engineer (ISSE) for the TAC2O systems program. This position will be providing managed IT support of TAC2O systems for high-priority defense intelligence collection needs. Duties/Responsibilities: Provides technical expertise to ensure the network systems meet DIA C&A and IA requirements and are properly certified and accredited Responsibilities are full-time on customer’s onsite and will cover classified programs and Special Access Programs (SAP). No Telework. Designs, develops, and recommends integrated security system and physical control solutions that will ensure proprietary/confidential data and systems are protected Assist team in DIA’s Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO) Offers technical engineering services for the support of integrated security systems and solutions, managing information-related risks effectively Works closely with the client during the strategic design process to translate security and business requirements into actionable technical designs Configures and validates secure systems and physical controls, and tests security products and systems to detect security weakness Develop comprehensive system test plans (STP) to assess the security posture of the information systems Analyze scan results and security findings to prioritize remediation efforts and implement corrective measures Participate in incident response activities and assist in the resolution of security incidents as needed

Requirements

TS/SCI with Poly (#tssci) (#polygraph)
Exhibits advanced Windows administration capabilities and Linux proficiency for optimal system management
Security credentials, certifications, and experience commensurate with the job description
Practical experience deploying, maintaining, and troubleshooting security tools
Demonstrates the ability to critically assess current practices, identify deficiencies, propose innovative solutions, and effectively implement these improvements
Thrives in a fast-paced, complex environment; displays exceptional poise and an unwavering commitment to hard work
Displays excellent problem-solving abilities and attention to detail
Experience with each of the following security tools: Assured Compliance Assessment Solution (ACAS), Trellix, Splunk, and Security Technical Implementation Guide (STIG)’s
Collaborate with stakeholders to identify security requirements and ensure alignment with organizational objectives
Stay abreast of the latest security trends, technologies, and best practices to continually enhance the security posture of the information systems
A Bachelor’s Degree from an accredited institute in an area applicable to this position and four (4) years of relevant experience
An additional four (4) years of relevant experience may be substituted for the bachelor’s degree
Must presently be 8570 compliant (IAT Level 2 preferred); must be 8570 compliant (IAT Level 2) by date of security indoctrination with any necessary continuing education (CE) for certification

Nice To Haves

Familiar with tiered security environments (U, S, TS)
Deep understanding of Trellix antivirus suite of products
Knowledge of Splunk architecture and experience structuring multi-level queries
Windows expert – capable of advanced Powershell scripting and general administrative functions
Experience with one or more commercial government cloud service provider’s system accreditation process
Experience as a Cybersecurity Control Assessor for SAP
Experience with Ongoing Authorizations and Assessments
Experience with C2S Cloud, or DevOpsSec

Responsibilities

Provides technical expertise to ensure the network systems meet DIA C&A and IA requirements and are properly certified and accredited
Designs, develops, and recommends integrated security system and physical control solutions that will ensure proprietary/confidential data and systems are protected
Assist team in DIA’s Authorization and Accreditation (A&A) process using RMF across the design lifecycle for classified systems obtaining and maintaining Interim Authorization to Test (IATT), Authority to Connect (ATC) and Authorization to Operate (ATO)
Offers technical engineering services for the support of integrated security systems and solutions, managing information-related risks effectively
Works closely with the client during the strategic design process to translate security and business requirements into actionable technical designs
Configures and validates secure systems and physical controls, and tests security products and systems to detect security weakness
Develop comprehensive system test plans (STP) to assess the security posture of the information systems
Analyze scan results and security findings to prioritize remediation efforts and implement corrective measures
Participate in incident response activities and assist in the resolution of security incidents as needed

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone