Principal Technology Security Engineer (Government)

AT&T; Chantilly (VA); On-site; USD 158,000 - 237,000; Full time

Benefits offered by this job

Medical/Dental/Vision coverage

401(k) plan

Tuition reimbursement program

Paid Time Off and Holidays

Paid Parental Leave

Paid Caregiver Leave

Adoption Reimbursement

Disability Benefits

Life and AD&D Insurance

Employee discounts on AT&T mobility

Job summary

AT&T Global Public Sector seeks a Principal Technology Security Engineer in Chantilly, VA, to lead enterprise vulnerability management and ensure secure, compliant cloud and network services for the Federal Government.

You will translate FISMA/NIST RMF requirements into scalable security practices, guide cross-functional teams, and own the vulnerability lifecycle from assessment to authorization and continuous monitoring.

Qualifications

• Bachelor’s degree required.
• Active CISSP required.
• CSM, Sec+, CCNA desired.
• Hands-on experience with Tenable Security Center and enterprise vulnerability management.
• Working knowledge of ServiceNow ecosystem including GRC and vulnerability mgmt.
• Experience with FEDRAMP and CMMC Certification Process and cloud service offers deployment.

Responsibilities

• Lead and continuously improve the enterprise vulnerability management program using Tenable Security Center.
• Manage Tenable Security Center architecture, policies, schedules, and reporting.
• Own the end-to-end vulnerability management lifecycle from onboarding to closure.
• Integrate Tenable findings with Xacta 360 and ServiceNow workflows for continuous monitoring and POA&M management.
• Translate RMF/NIST requirements into measurable governance practices.
• Develop executive dashboards and metrics to communicate security posture.

Skills

Identity and access management

Vulnerability management

Security governance

Education

Bachelor’s degree

CISSP

Tools

Tenable Security Center

Xacta 360

ServiceNow

Job description

Principal Technology Security Engineer (Government

AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

The AT&T Integrity, Compliance & Risk Management Team enables the company to bring secure, resilient, and authorization-ready services to the Public Sector market. Government cybersecurity authorizations are essential to offering and sustaining AT&T solutions for Federal Aviation Administration - Enterprise Network Services (FENS) program.

This role provides the specialized technical leadership needed to translate FISMA, NIST Risk Management Framework, agency policy, and contractual obligations into scalable security practices that protect AT&T, strengthen customer confidence, and reduce business and operational risk. Serving as a trusted interface among product, engineering, operations, executive leadership, and government stakeholders, the Principal Technology Security Engineer will guide services through the full cybersecurity compliance lifecycle—from early architecture and control design through assessment, Authorization to Operate (ATO), continuous monitoring, and ongoing authorization—helping accelerate market access while sustaining defensible security and compliance outcomes.

The Principal Technology Security Engineer will serve as the primary manager and technical subject-matter resource for AT&T’s Tenable Security Center capability supporting Civilian, Department of Defense, State, and Local Government customers. You will own the vulnerability-management lifecycle, including scan governance, coverage, finding analysis, risk-based prioritization, remediation coordination, metrics, reporting, and continuous process improvement.

The role will apply deep technical knowledge of enterprise identity, server, virtualization, logging, DNS/IP address management, and network technologies to evaluate exposure, resolve visibility and integration issues, and provide technically credible remediation guidance. Working with infrastructure administrators, security operations teams, system owners, compliance personnel, assessors, and government stakeholders, the Principal Technology Security Engineer will integrate Tenable results with Xacta-based continuous monitoring, findings, Plans of Action and Milestones, and authorization activities.

The position requires independent technical judgment, strong process ownership, clear documentation and communication skills, and the ability to lead cross-functional vulnerability-management activities while escalating material risks and complex decisions to senior leadership.

Job Duties/Responsibilities:

• Lead and continuously improve the enterprise vulnerability management program using Tenable Security Center, ensuring effective governance, operational oversight, and risk-based security outcomes.
• Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, credentials, policies, schedules, asset inventories, dashboards, reporting, and platform integrations.
• Own the end-to-end vulnerability management lifecycle, including asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting, and closure.
• Integrate Tenable Security Center findings with Xacta 360 and ServiceNow workflows to support continuous monitoring, POA&M management, control evidence, risk tracking, remediation activities, and authorization reporting.
• Analyze vulnerability data, validate findings, identify coverage gaps and credentialing issues, distinguish false positives from actionable risk, and provide remediation guidance to technical teams.
• Translate FISMA, NIST RMF, NIST SP 800-53, agency requirements, and contractual obligations into measurable vulnerability management processes, controls, and governance practices.
• Develop executive dashboards, operational metrics, trend analysis, and decision-ready reporting to communicate security posture, remediation progress, and residual risk.
• Establish and maintain vulnerability management governance, including standard operating procedures, service-level objectives, escalation paths, evidence requirements, quality controls, and accountability mechanisms.
• Leverage expertise in Windows Server, Active Directory, Nutanix, CyberArk, SailPoint, Splunk, Infoblox, Cisco SD-WAN, NetFlow, and IPsec technologies to assess exposure and recommend risk-based remediation strategies.
• Correlate vulnerability information with security events, asset inventories, identity data, privileged-access records, network telemetry, DNS/IPAM information, ServiceNow records, and Xacta 360 evidence to improve risk analysis and reporting accuracy.
• Partner with infrastructure, security operations, application, compliance, and system-owner teams to resolve scan failures, integration issues, asset visibility gaps, and remediation challenges.
• Evaluate infrastructure and security changes for impacts to vulnerability visibility, scan coverage, authentication, logging, compliance evidence, and continuous monitoring requirements while communicating risks and recommendations to leadership and stakeholders.

Required Clearance:

Public Trust (#publictrust) (#clearable)

Required Qualifications:

• Bachelor’s degree
• Must have an active CISSP

Desired Qualifications:

• CSM, Sec+, CCNA
• Advanced proficiency with Xacta 360 or comparable governance, risk, and compliance platforms.
• Hands-on experience with Tenable Security Center and enterprise vulnerability management practices.
• Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability mgmt.
• Strong expertise in identity and access management.
• Experience with FEDRAMP and CMMC Certification Process and the deployment of certified cloud service offers
  

Our Principal Technology Security job earn between $158,200 - $237,400 USD Annual. Not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

This is a full-time onsite role based in the location(s) posted and is performed from the designated work location five (5) days per week. No relocation is offered.

AT&T will not hire any applicants for this position who require employer visa sponsorship now or in the future.

Weekly Hours: 40

Time Type: Regular

Location: Chantilly, Virginia

AT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. to learn more or request an application.