Government ISSE — Lead Vulnerability & RMF Security

VulnU; Chantilly (VA); On-site; USD 158,000 - 237,000; Full time

Benefits offered by this job

Paid parental leave

23 days PTO

Learning budget

Medical/Dental/Vision coverage

Job summary

AT&T Global Public Sector is seeking an Information System Security Engineer (ISSE) to lead the vulnerability management program and support continuous monitoring for government clients. You will own the vulnerability lifecycle, coordinate with IT and security teams, and ensure compliance with FISMA, NIST RMF, and 800-53 controls.

The role requires hands-on expertise with Tenable Security Center, Xacta 360, and ServiceNow, plus strong IAM and security operations capabilities.

Qualifications

• Bachelor’s degree required.
• Active CISSP certification required.
• Experience with Tenable Security Center and enterprise vulnerability management.
• Familiarity with Xacta 360 and ServiceNow for governance, risk, and compliance.
• Strong identity and access management knowledge.
• Experience with Windows Server and Active Directory.

Responsibilities

• Lead enterprise vulnerability management program using Tenable Security Center.
• Manage Tenable Center architecture, policies, and integrations.
• Own end-to-end vulnerability management lifecycle including remediation tracking.
• Integrate Tenable findings with Xacta 360 and ServiceNow workflows for continuous monitoring.
• Translate RMF/NIST requirements into measurable vulnerability management processes.
• Develop executive dashboards and operational metrics to show security posture and progress.

Skills

Vulnerability management

Risk assessment

Governance, RMF/NIST

Identity and access management

Education

Bachelor’s degree

CISSP

CCNA

Tools

Tenable Security Center

Xacta 360

ServiceNow

Windows Server

Active Directory

Nutanix

CyberArk

SailPoint

Splunk

Infoblox

Cisco SD-WAN

NetFlow

IPsec

Job description

AT&T Global Public Sector is seeking an Information System Security Engineer (ISSE) to lead the vulnerability management program and support continuous monitoring for government clients. You will own the vulnerability lifecycle, coordinate with IT and security teams, and ensure compliance with FISMA, NIST RMF, and 800-53 controls.

The role requires hands-on expertise with Tenable Security Center, Xacta 360, and ServiceNow, plus strong IAM and security operations capabilities.