Information System Security Engineer (Government)

VulnU; Chantilly (VA); On-site; USD 158,000 - 237,000; Full time

Benefits offered by this job

Paid parental leave

23 days PTO

Learning budget

Medical/Dental/Vision coverage

Job summary

AT&T Global Public Sector is seeking an Information System Security Engineer (ISSE) to lead the vulnerability management program and support continuous monitoring for government clients. You will own the vulnerability lifecycle, coordinate with IT and security teams, and ensure compliance with FISMA, NIST RMF, and 800-53 controls.

The role requires hands-on expertise with Tenable Security Center, Xacta 360, and ServiceNow, plus strong IAM and security operations capabilities.

Qualifications

• Bachelor’s degree required.
• Active CISSP certification required.
• Experience with Tenable Security Center and enterprise vulnerability management.
• Familiarity with Xacta 360 and ServiceNow for governance, risk, and compliance.
• Strong identity and access management knowledge.
• Experience with Windows Server and Active Directory.

Responsibilities

• Lead enterprise vulnerability management program using Tenable Security Center.
• Manage Tenable Center architecture, policies, and integrations.
• Own end-to-end vulnerability management lifecycle including remediation tracking.
• Integrate Tenable findings with Xacta 360 and ServiceNow workflows for continuous monitoring.
• Translate RMF/NIST requirements into measurable vulnerability management processes.
• Develop executive dashboards and operational metrics to show security posture and progress.

Skills

Vulnerability management

Risk assessment

Governance, RMF/NIST

Identity and access management

Education

Bachelor’s degree

CISSP

CCNA

Tools

Tenable Security Center

Xacta 360

ServiceNow

Windows Server

Active Directory

Nutanix

CyberArk

SailPoint

Splunk

Infoblox

Cisco SD-WAN

NetFlow

IPsec

Job description

# Information System Security Engineer (Government)AT&T · att.comCategory: GRC & ComplianceLocation: Chantilly, VirginiaSalary: $158,200 – $237,400Clearance: Public Trust## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave* 23 days PTO* Learning budgetThis is a full-time onsite role based in the location(s) posted and is performed from the designated work location five days per week. No relocation is offered.AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.The AT&T Integrity, Compliance & Risk Management Team enables the company to bring secure, resilient, and authorization-ready services to the Public Sector market. Government cybersecurity authorizations are essential to offering and sustaining AT&T solutions for Federal Aviation Administration - Enterprise Network Services (FENS) program. This role provides the specialized technical leadership needed to translate FISMA, NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices that protect AT&T, strengthen customer confidence, and reduce business and operational risk. Serving as a trusted interface among product, engineering, operations, executive leadership, and government stakeholders, the Information System Security Engineer (ISSE) will guide services through the full cybersecurity compliance lifecycle—from early architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization—helping accelerate market access while sustaining defensible security and compliance outcomes.The Information Systems Security Engineer (ISSE) will serve as the primary manager and technical subject-matter resource for AT&T’s Tenable Security Center capability supporting Civilian, Department of Defense, State, and Local Government customers. The ISSE will own the vulnerability-management lifecycle, including scan governance, coverage, finding analysis, risk-based prioritization, remediation coordination, metrics, reporting, and continuous process improvement. The role will apply deep technical knowledge of enterprise identity, server, virtualization, logging, DNS/IP address management, and network technologies to evaluate exposure, resolve visibility and integration issues, and provide technically credible remediation guidance. Working with infrastructure administrators, security operations teams, system owners, compliance personnel, assessors, and government stakeholders, the ISSE will integrate Tenable results with Xacta-based continuous monitoring, findings, Plans of Action and Milestones, and authorization activities. The position requires independent technical judgment, strong process ownership, clear documentation and communication skills, and the ability to lead cross-functional vulnerability-management activities while escalating material risks and complex decisions to senior leadership.Job Duties/Responsibilities:· Lead and continuously improve the enterprise vulnerability management program using Tenable Security Center, ensuring effective governance, operational oversight, and risk-based security outcomes.· Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.· Own the end-to-end vulnerability management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.· Integrate Tenable Security Center findings with Xacta 360 and ServiceNow workflows to support continuous monitoring, POA&M management, control evidence, risk tracking, remediation activities, and authorization reporting.· Analyze vulnerability data, validate findings, identify coverage gaps and credentialing issues, distinguish false positives from actionable risk, and provide remediation guidance to technical teams.· Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability management processes, controls, and governance practices.· Develop executive dashboards, operational metrics, trend analysis, and decision-ready reporting to communicate security posture, remediation progress, and residual risk.· Establish and maintain vulnerability management governance, including standard operating procedures, service-level objectives, escalation paths, evidence requirements, quality controls, and accountability mechanisms.· Leverage expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec technologies to assess exposure and recommend risk-based remediation strategies.· Correlate vulnerability information with security events, asset inventories, identity data, privileged-access records, network telemetry, DNS/IPAM information, ServiceNow records, and Xacta 360 evidence to improve risk analysis and reporting accuracy.· Partner with infrastructure, security operations, application, compliance, and system-owner teams to resolve scan failures, integration issues, asset visibility gaps, and remediation challenges.· Evaluate infrastructure and security changes for impacts to vulnerability visibility, scan coverage, authentication, logging, compliance evidence, and continuous monitoring requirements while communicating risks and recommendations to leadership and stakeholders.Required Clearance:Public Trust (#publictrust) (#clearable) Required Qualifications:· Bachelor’s degree· Must have an active CISSPDesired Qualifications:· CSM, Sec , CCNA· Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.· Hands-on experience with Tenable Security Center and enterprise vulnerability management practices.· Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability mgmt.· Strong expertise in identity and access management.· Experience with FEDRAMP and CMMC Certification Process and the deployment of certified cloud service offers Our Principal Technology Security jobs earn between $158,200.00 - $237,400.00 USD Annual. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.Joining our team comes with amazing perks and benefits:Medical/Dental/Vision coverage401(k) planTuition reimbursement programPaid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)Paid Parental LeavePaid Caregiver LeaveAdditional sick leave beyond what state and local law require may be available but is unprotectedAdoption ReimbursementDisability Benefits (short term and long term)Life and Accidental Death InsuranceSupplemental benefit programs: critical illness/accident hospital indemnity/group legalEmployee Assistance Programs (EAP)Extensive employee wellness programsEmployee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phoneWeekly Hours:40Time Type:RegularLocation:Chantilly, VirginiaSalary Range:$158,200.00 - $237,400.00AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here.