Lead Technology Security Engineer (Government)

AT&T; Chantilly (VA); On-site; USD 144,000 - 216,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement

Paid Time Off

Paid Parental Leave

Disability Benefits

Life Insurance

Employee discounts

Job summary

AT&T Global Public Sector seeks a Lead Technology Security Engineer to drive security across the NIST RMF lifecycle for federal programs. Based in Chantilly, VA, this full‑time onsite role partners with product, engineering, operations, and government stakeholders to design, implement, and sustain secure services and Authorization to Operate.

The role blends strategic guidance with hands‑on expertise, leveraging Xacta, Tenable, and ServiceNow to manage risk, continuous monitoring, and

Qualifications

• Bachelor’s degree required.
• Active CISSP required.

Responsibilities

• Lead NIST RMF lifecycle activities using Xacta for GRC and authorization‑management.
• Translate FISMA, FEDRAMP, DoD RMF, CMMC requirements into actionable security plans.
• Develop and quality‑assure authorization packages in Xacta (SSPs, SARs, CPs).
• Plan and oversee security control assessments and verify findings.
• Lead POA&M governance with Xacta and ServiceNow to track remediation.
• Establish continuous‑compliance using SIEM, endpoint telemetry, Tenable data.
• Analyze vulnerabilities from Tenable, coordinate remediation in ServiceNow.
• Perform security architecture reviews across domains to identify gaps.
• Assess security impact of changes including cloud, APIs, data flows.
• Apply Zero Trust and threat‑informed risk principles.
• Integrate security governance into CI/CD workflows to prevent noncompliant changes.
• Communicate security posture to stakeholders with metrics and risk indicators.

Education

Bachelor’s degree

CISSP

Tools

Xacta 360

Tenable Security Center

ServiceNow

GRC platforms

Job description

Lead Technology Security Engineer (Government)

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

The AT&T Integrity, Compliance & Risk Management Team enables the company to bring secure, resilient, and authorization-ready services to the Public Sector market. Government cybersecurity authorizations are essential to offering and sustaining AT&T solutions for Federal Aviation Administration - Enterprise Network Services (FENS) program.

This role provides the specialized technical leadership needed to translate FISMA, NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices that protect AT&T, strengthen customer confidence, and reduce business and operational risk. Serving as a trusted interface among product, engineering, operations, executive leadership, and government stakeholders, the Lead Technology Security Engineer will guide services through the full cybersecurity compliance lifecycle—from early architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization—helping accelerate market access while sustaining defensible security and compliance outcomes.

This role combines strategic influence with hands‑on technical expertise to translate evolving federal cybersecurity mandates into scalable security architectures, disciplined operational practices, and successful authorization outcomes. The Lead will partner across engineering, operations, product, and government stakeholder teams to strengthen cyber-risk decisions, accelerate secure service delivery, and sustain compliance throughout the system lifecycle.

Job Duties/Responsibilities

• Lead NIST RMF lifecycle activities, including system categorization, control selection and tailoring, implementation, assessment, authorization, continuous monitoring, and ongoing authorization, using Xacta as the authoritative GRC and authorization‑management platform.
• Translate FISMA, FEDRAMP, DoD RMF, CMMC, agency policy, and contractual requirements into actionable security control implementation plans, technical standards, security requirements, and operating procedures.
• Develop and quality‑assure authorization packages in Xacta, including system security plans, security assessment reports, control implementation statements, privacy artifacts, contingency plans, risk assessments, and supporting evidence.
• Plan and oversee security control assessments, validate that controls operate as documented, identify implementation deficiencies, analyze root causes, and verify corrective actions and supporting evidence within Xacta.
• Lead POA&M governance using Xacta and ServiceNow, ensuring vulnerabilities and control deficiencies identified through assessments, audits, penetration testing, and continuous monitoring are prioritized, assigned, tracked, and remediated within risk‑based timelines.
• Establish continuous‑compliance and monitoring practices using automated control evidence, security configuration baselines, endpoint telemetry, SIEM capabilities, and vulnerability data from Tenable Security Center.
• Analyze and govern vulnerabilities identified through Tenable Security Center, validate findings, assess risk and asset criticality, coordinate remediation through ServiceNow, and maintain traceability to applicable controls and POA&Ms in Xacta.
• Perform security architecture and design reviews across identity, network, application, data, cloud, and operational security domains to identify control gaps and recommend risk‑reduction measures.
• Assess the security impact of system changes, including new technologies, cloud services, APIs, data exchanges, integrations, boundary modifications, and changes to architecture, operations, or data flows.
• Apply Zero Trust and threat‑informed risk principles, including strong identity, least privilege, device assurance, segmentation, continuous verification, policy‑based access, and compensating controls.
• Integrate security governance into ServiceNow configuration, change, release, incident, and problem‑management workflows, including security reviews for infrastructure‑as‑code and automated deployment pipelines, to prevent unauthorized or noncompliant changes.
• Communicate security posture and residual risk to system owners, authorizing officials, governance bodies, and executive stakeholders using risk indicators, compliance trends, vulnerability metrics, POA&M status, mitigation options, and decision‑ready information derived from Xacta, Tenable Security Center, and ServiceNow.

Required Clearance

• Public Trust (#publictrust) (#clearable)

Required Qualifications

• Bachelor’s degree
• Must have an active CISSP

Desired Qualifications

• CSM, Sec+
• Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.
• Hands‑on experience with Tenable Security Center and enterprise vulnerability management practices.
• Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability mgmt.
• Strong expertise in identity and access management.
• Experience with FEDRAMP and CMMC Certification Process and the deployment of certified cloud service offers

Our Lead Technology Security Engineer earns between $143,800 - $215,800 USD Annual. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company‑designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

This is a full‑time onsite role based in the location(s) posted and is performed from the designated work location five (5) days per week. No relocation is offered.

AT&T will not hire any applicants for this position who require employer visa sponsorship now or in the future.

Weekly Hours: 40

Time Type: Regular

Location: Chantilly, Virginia

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.