Information Systems Security Officer (ISSO3) (Government)

AT&T; Columbia (MD); On-site; USD 108,000 - 239,000; Full time

Job summary

AT&T is seeking a Senior Information System Security Officer to support information assurance programs for Federal Government clients. This role requires a strong background in security policy implementation, system operations, and a minimum presence of five days a week in Columbia, Maryland. Candidates must have a Bachelor's degree in a related field, significant experience as an ISSO, and necessary security certifications.

Benefits

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Paid Parental Leave

Additional sick leave

Disability Benefits

Life and Accidental Death Insurance

Employee Assistance Programs (EAP)

Employee discounts up to 50% off

Qualifications

• 15 years' experience as an ISSO, 3 years in at least 3 specified areas.
• Experience with security policies in a mobile environment required.

Responsibilities

• Provide support for implementing and enforcing information systems security policies.
• Maintain operational security posture for information systems.
• Perform day-to-day security operations.

Skills

Current security tools

Hardware/software security implementation

Communication protocols

Encryption techniques/tools

Education

Bachelor’s degree in computer science or related discipline

DoD 8570 compliance with IAM Level I

Tools

CAP

CND

Cloud+

GSLC

Security+ CE

HCISPP

Job description

Job Description:

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

MAROONMIDNIGHTS (MMN) is focused is on Directory Infrastructure Services (Active Directory (AD), Exchange, Identity Management, etc.), Enterprise Defense Services (Access Control, Security Services, etc.), and Desktop and Enclave Services (Application Services, Enclave Support Services, Systems Administration, etc.) to enable organizations to execute their Enterprise IT (EIT) mission obligations.

AT&T has an opening for a senior Information System Security Officer: To Provide support for program, organization, system, or enclave’s information assurance program Enterprise IT (EIT) mission obligations.

This position requires office presence a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Description of Job Duties/Responsibilities:

Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies. Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed. Assist with the management of security aspects of the information system and perform day-to-day security operations of the system.

• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Perform vulnerability/risk assessment analysis to support certification and accreditation.
• Provide configuration management (CM) for information system security software, hardware, and firmware.
• Manage changes to system and assesses the security impact of those changes.
• Prepare and review documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Support security authorization activities in compliance with National Institute of Standards and Technology Risk Management Framework (NIST RMF).
• Provide support to senior ISSOs for implementing, and enforcing information systems security policies, standards, and methodologies.
• Assist with preparation and maintenance of documentation.
• Assist in the evaluation of security solutions to ensure they meet security requirements for processing classified information.
• Assist with the CM for information system security software, hardware, and firmware.
• Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades.
• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies.
• Develop and maintain documentation for C&A in accordance with ODNI and DoD policies.
• Provide CM for security-relevant information system software, hardware, and firmware.
• Develop system security policy and ensure compliance.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Maintain operational security posture for an information system or program.
• Provide support to the Information System Security Manager (ISSM) for maintaining the appropriate operational Cybersecurity posture for a system, program, or enclave.
• Develop and update the system security plan and other Cybersecurity documentation.
• Assist with the management of security aspects of the information system and perform day-to-day security operations of the system.
• Administer the user identification and authentication mechanism of the Information System (IS).
• Prepare and maintain documentation.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Perform CM of information system security software, hardware, and firmware.
• Propose, coordinate, and implement, information systems security policies, standards, and methodologies and ensure they are followed.
• Develop and maintain documentation for C&A in accordance with ODNI and DoD policies.
• Evaluate security solutions to ensure they meet security requirements for processing classified information.
• Obtain C&A for ISs under their purview.
• Provide support for a program, organization, system, or enclave’s information assurance program.
• Plan and coordinate the IT security programs and policies.
• Manage and control changes to the system and assess the security impact of those changes.
• Develop system security policy and ensure compliance.
• Provide daily oversight and direction to contractor ISSOs.
• Serve as an ISSM.
• Interact with customers, IT staff, and high-level corporate officers to define and achieve the required Cybersecurity objectives.

Required Clearance: TS/SCI with polygraph. (#ts/sci) (#polygraph)

Required Qualifications: Bachelor’s degree in computer science or related discipline from an accredited college or university is required. (NOTE: Five (5) years of additional experience as an ISSO may be substituted for a bachelor’s degree). Fifteen (15) years' experience as an ISSO on programs and contracts of similar scope, type, and complexity is required. Three (3) of those years must include experience in at least three (3) of the following:

• Current security tools.
• Hardware/software security implementation.
• Communication protocols.
• Encryption techniques/tools.

DoD 8570 compliance with Information Assurance Management (IAM) Level I is required. Any cert from the below list is acceptable:

• CAP
• CND
• Cloud+
• GSLC
• Security+ CE
• HCISPP

Desired Qualifications: Experience with security policies in a mobile environment is required, including infrastructure and end user.

Ready to join our team? Apply today!

Our Information Systems Security Officer (ISSO3) (Government) earns between $108,000 - $238,600 yearly. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage

• 401(k) plan

• Tuition reimbursement program

• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays) *Pro-rated when working less than 40 hrs/wk.

• Paid Parental Leave

• Paid Caregiver Leave

• Additional sick leave beyond what state and local law require may be available but is unprotected · Adoption Reimbursement

• Disability Benefits (short term and long term)

• Life and Accidental Death Insurance

• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal

• Employee Assistance Programs (EAP)

• Extensive employee wellness programs

• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

Weekly Hours:

40

Time Type:

Regular

Location:

Columbia, Maryland

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.AT&T is a fair chance employer and does not initiate a background check until an offer is made.