Senior ISSO - NIST RMF Leader & Xacta Expert

AT&T; Chantilly (VA); Presencial; USD 144.000 - 216.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical/Dental/Vision coverage

401(k) plan

PTO and holidays

Paid parental leave

Tuition reimbursement

EAP and wellness programs

Employee discounts (AT&T plans and per

Descripción de la vacante

AT&T Global Public Sector is seeking a Lead Technology Security professional to perform NIST RMF activities and manage security programs in a federal context from Chantilly, VA. This full-time onsite role requires a Public Trust clearance and CISSP certification.

You will drive authorization packages, risk-based remediation, and continuous monitoring using Xacta, Tenable, and ServiceNow, ensuring alignment with FEDRAMP, CMMC, and agency policy requirements.

Formación

• Bachelor's degree required; active CISSP certification.
• Experience translating security frameworks into technical controls.
• Strong knowledge of RMF, NIST, FEDRAMP and CMMC.

Responsabilidades

• Lead RMF lifecycle activities, including system categorization, control selection and tailoring, implementation, assessment, authorization, continuous monitoring, and ongoing authorization, using Xacta.
• Translate requirements into actionable security control implementation plans, standards, and procedures.
• Develop and quality-assure authorization packages in Xacta with SSPs, SARs, control statements, and evidence.
• Plan and oversee security control assessments and verify remediation actions within Xacta.
• Lead POA&M governance using Xacta and ServiceNow to prioritize and track remediation within risk-based timelines.
• Establish continuous compliance and monitoring using SIEM, vulnerability data, and automated evidence.

Educación

Bachelor's degree

CISSP

Herramientas

Xacta 360

Tenable Security Center

ServiceNow GRC

Identity and Access Management (IAM)

FEDRAMP

CMMC Certification Process

Descripción del empleo

AT&T Global Public Sector is seeking a Lead Technology Security professional to perform NIST RMF activities and manage security programs in a federal context from Chantilly, VA. This full-time onsite role requires a Public Trust clearance and CISSP certification.

You will drive authorization packages, risk-based remediation, and continuous monitoring using Xacta, Tenable, and ServiceNow, ensuring alignment with FEDRAMP, CMMC, and agency policy requirements.