Lead Technology Security - ISSO (Government)

AT&T; Chantilly (VA); On-site; USD 144,000 - 216,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k)

Tuition reimbursement

Paid Time Off and Holidays

Parental Leave

Caregiver Leave

Adoption Reimbursement

Disability Benefits

Life and AD&D Insurance

Wellness programs

Job summary

AT&T is seeking a Lead Technology Security Officer (ISSO) in Chantilly, Virginia, for a full-time onsite role. The ISSO translates FISMA, NIST RMF, agency policy, and contractual obligations into scalable security practices across product, engineering, and operations.

The Lead-Technology Security role combines strategic influence with hands-on expertise to guide security through the full lifecycle, from architecture through ATO and continuous monitoring, partnering with government stakeholders

Qualifications

• Active CISSP or CISM certification required.
• JCAM/CSAM tool experience.
• FedRAMP cloud solution acquisition and implementation experience.
• Tenable Security Center tool experience.
• FISMA and NIST compliance experience.

Responsibilities

• Advise senior leadership or Authorizing Official of changes affecting cybersecurity posture.
• Collect and maintain data needed to meet system cybersecurity reporting.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Coordinate cybersecurity inspections, tests, and reviews for the network environment.
• Integrate cybersecurity requirements into continuity planning for the system and/or organization(s).
• Identify IT security program implications of new technologies or upgrades.
• Interpret patterns of noncompliance to determine risk impact and program effectiveness.
• Oversee the information security training and awareness program.

Skills

CISSP

CISM

Security governance

Risk management

Policy compliance

Education

Bachelor's degree

Tools

Tenable Security Center

JCAM/CSAM

FedRAMP

Job description

This is a full-time onsite role based in the location(s) posted and is performed from the designated work location five days per week. No relocation is offered.

The AT&T Integrity, Compliance & Risk Management Team enables the company to bring secure, resilient, and authorization-ready services to the Public Sector market. Government cybersecurity authorizations are essential to offering and sustaining AT&T solutions for Department of Education program.

This role provides the specialized technical leadership needed to translate FISMA, NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices that protect AT&T, strengthen customer confidence, and reduce business and operational risk. Serving as a trusted interface among product, engineering, operations, executive leadership, and government stakeholders, the ISSO will guide services through the full cybersecurity compliance lifecycle—from early architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization—helping accelerate market access while sustaining defensible security and compliance outcomes.

The Lead-Technology Security title will serve as a senior cybersecurity leader driving secure, resilient, and compliant solutions for AT&T systems, services, and programs.

The ISSO role combines strategic influence with hands‑on technical expertise to translate evolving federal cybersecurity mandates into scalable security architectures, disciplined operational practices, and successful authorization outcomes. The ISSO will partner across engineering, operations, product, and government stakeholder teams to strengthen cyber‑risk decisions, accelerate secure service delivery, and sustain compliance throughout the system lifecycle.

Job Duties/Responsibilities:

• Advise appropriate senior leadership or Authorizing Official of changes affecting the organization's cybersecurity posture.
• Collect and maintain data needed to meet system cybersecurity reporting.
• Ensure that security improvement actions are evaluated, validated, and implemented as required.
• Ensure that cybersecurity inspections, tests, and reviews are coordinated for the network environment.
• Ensure that cybersecurity requirements are integrated into the continuity planning for that system and/or organization(s)
• Identify information technology (IT) security program implications of new technologies or technology upgrades.
• Interpret patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
• Oversee the information security training and awareness program.
• Participate in an information security risk assessment during the Security Assessment and Authorization process.
• Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of network system(s) operations.
• Recognize a possible security violation and take appropriate action to report the incident, as required.
• Recommend resource allocations required to securely operate and maintain an organization's cybersecurity requirements.
• Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered.
• Track audit findings and recommendations to ensure that mitigation actions are taken.
• Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies.
• Identify security requirements specific to an information technology (IT) system in all phases of the system life cycle.
• Ensure that plans of actions and milestones or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.

Required Clearance:

Public Trust (#publictrust)

Required Qualifications:

• Bachelor’s degree
• Must have an active CISSP and/or CISM certification
• Joint Cybersecurity Authorization Management (JCAM/CSAM) tool experience
• FedRAMP cloud solution acquisition and implementation experience
• Tenable Security Center tool experience
• FISMA and NIST compliance experience

Our Lead Technology Security's earn between $143,800 - $215,800. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone

Weekly Hours: 40

Time Type: Regular

Location: Chantilly, Virginia

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.