ISSE: Vulnerability Mgmt Leader (RMF/ATO) Onsite Chantilly

AT&T; Chantilly (VA); On-site; USD 158,000 - 237,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Paid Parental Leave

Paid Caregiver Leave

Adoption Reimbursement

Disability Benefits

Life and AD&D Insurance

Employee wellness programs

Employee discounts

Job summary

AT&T Global Public Sector seeks an Information Systems Security Engineer (ISSE) to lead enterprise vulnerability management. You will own the Tenable Security Center program, integrate with Xacta 360 and ServiceNow, and translate FISMA and RMF requirements into measurable security controls.

Strong collaboration with cross-functional teams is essential. The role requires deep technical knowledge of identity, server, virtualization, logging, DNS/IP management, and network technologies, with

Qualifications

• Bachelor's degree is required.
• Must have an active CISSP certification.
• CSM, Sec+, CCNA are desired qualifications.

Responsibilities

• Lead and continuously improve enterprise vulnerability management using Tenable Security Center.
• Manage Tenable Security Center architecture: scan strategies, repositories, scanners, credentials, policies, schedules, inventories, dashboards, reporting.
• Own the end-to-end vulnerability management lifecycle: onboarding, scanning, validation, prioritization, remediation tracking, and closure.
• Integrate Tenable findings with Xacta 360 and ServiceNow for continuous monitoring and POA&M management.
• Analyze vulnerability data, identify coverage gaps, and provide remediation guidance to technical teams.
• Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements into vulnerability management processes and governance.
• Develop executive dashboards and metrics to communicate security posture and remediation progress.

Education

Bachelor's degree

CISSP

Tools

Tenable Security Center

Xacta 360

ServiceNow

Active Directory

NIST RMF

Job description

AT&T Global Public Sector seeks an Information Systems Security Engineer (ISSE) to lead enterprise vulnerability management. You will own the Tenable Security Center program, integrate with Xacta 360 and ServiceNow, and translate FISMA and RMF requirements into measurable security controls.

Strong collaboration with cross-functional teams is essential. The role requires deep technical knowledge of identity, server, virtualization, logging, DNS/IP management, and network technologies, with