A

AT&T

Runs US wireless and fiber internet networks

Information Systems Security Engineer - Information Systems Security Engineering, Government

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours
Full-timeColumbia, MD, USA$98.1k - $143.2k /yr

About the Job

Requirements

  • Seven years of experience as an Information Systems Security Engineer on Federal Government programs and contracts of similar scope, type, and complexity is required.
  • A bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related discipline from an accredited college or university is required; four additional years of Information Systems Security Engineer experience may substitute for the degree.
  • DoD 8570 compliance with Information Assurance Systems Architect and Engineer Level 2 is required.
  • Knowledge of servers, virtualization, routers, switches, firewalls, virtual local area networks, routing, and network segmentation is required.
  • Demonstrated experience authoring and maintaining System Security Plans, Security Control Traceability Matrices, and Plans of Action and Milestones is required.
  • A solid understanding of continuous monitoring, reauthorization, and configuration management processes is required.
  • Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools is required.
  • Knowledge of Windows, Linux, and network security controls implementation is required.
  • The candidate may be required to respond to after-hours requests in a 24/7 environment.

Responsibilities

  • Serve as the technical security engineer for assigned systems and System Security Plans, ensuring full lifecycle Risk Management Framework compliance.
  • Provide technical input for Authorization to Operate packages, risk acceptance decisions, and continuous monitoring efforts.
  • Implement and validate security controls from NIST Special Publication 800-53 and serve as a technical security liaison with technology frameworks.
  • Ensure all controls are mapped, implemented, and tested within the Security Control Traceability Matrix, and respond to Security Assessment Reports.
  • Collaborate with the vulnerability scanning team to ensure scan compliance, address and retest findings, and accurately reflect findings in the system's risk posture.
  • Support continuous monitoring, including vulnerability tracking and control reassessments, and serve as a technical security liaison with technology frameworks.
  • Coordinate with Information Systems Security Officers and system administrators to document and remediate vulnerabilities, control deficiencies, and Plan of Action and Milestones items.
  • Lead or support reauthorization efforts, ensuring system technical artifacts are updated, validated, and submitted on schedule.
  • Evaluate and document security-relevant changes, assessing configuration updates, patches, and system modifications for Risk Management Framework impact.
  • Interface with the Security Architect to ensure designs, configurations, and security mitigations align with approved architectures and customer mandates.
  • Work with Technology Framework teams to complete system documentation.
  • Test and evaluate configurations in a lab environment.
  • Provide security operations support as needed.
  • Train junior team members as needed.

Desired Qualifications

  • Python

About the Company

AT&T

Runs US wireless and fiber internet networks

AT&T sells mobile phone plans and home internet to households and businesses across the US, and runs a wireless business in Mexico. Its business rests on two networks: a nationwide 5G wireless network and a fiber internet network that is replacing its old copper phone lines. Companies and government agencies also buy private networks, security and connectivity services from its business unit. Most revenue comes from monthly service plans plus device installment payments, and the company pushes customers to combine phone and home internet. AT&T Inc. began in 1983 as Southwestern Bell, took the AT&T name after buying its former parent in 2005, and is based in Dallas, Texas.

Company size
10,001+
Company stage
IPO
Headquarters
Dallas, TX
Founded
1983

Recently Posted Jobs

Explore more opportunities at AT&T

See more jobs