Information Systems Security Engineer – ISSE1

AT&T

. Perform or review technical security assessments of computing environments to identify vulnerabilities and non-compliance with Information Assurance standards and regulations .

Posted 10/13/2026full-timeColumbia • Maryland • United StatesSeniorLead💰 $98,100 - $143,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in technical security assessments, risk management framework (RMF) compliance, and vulnerability management within federal environments. Proficient in implementing security controls and collaborating with cross-functional teams to ensure adherence to information assurance standards.

Highest-signal resume keywords

Technical Security AssessmentsRisk Management Framework (RMF) ComplianceSystem Security Plans (SSPs) AuthoringContinuous MonitoringDoD 8570 Compliance with IASAE Level 2

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementSecurity Control ImplementationConfiguration ManagementNetwork Security ControlsPython

Soft Skills

Excellent CommunicationTeamworkTraining Junior Team Members

Tools & Technologies

TenableSplunkSTIG Viewer

Certifications & Qualifications

DoD 8570 Compliance with IASAE Level 2TS/SCI with Polygraph Clearance

Industry Keywords

Information AssuranceFederal GovernmentSecurity Control Traceability Matrix (SCTM)Plan of Action and Milestones (POA&M)Continuous Monitoring

Tech Stack

Tools & technologies

FirewallsLinuxPythonSplunkTypeScript

About the role

Key responsibilities & impact

Perform or review technical security assessments of computing environments to identify vulnerabilities and non-compliance with Information Assurance standards and regulations
Recommend mitigation strategies
Serve as technical security engineer for assigned systems and System Security Plans (SSPs), ensuring full lifecycle RMF compliance
Provide technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring
Implement and validate security controls from NIST SP 800-53
Map, implement, and test controls within the Security Control Traceability Matrix (SCTM) and respond to Security Assessment Reports (SARs)
Collaborate with vulnerability scanning teams, including Tenable operators, to address, retest, and accurately reflect findings
Support continuous monitoring, vulnerability tracking, control reassessments, and configuration management
Coordinate with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and POA&M items
Lead or support reauthorization efforts and update, validate, and submit technical artifacts
Evaluate and document security-relevant changes, patches, configuration updates, and system modifications for RMF impact
Interface with the Security Architect to align designs, configurations, and mitigations with approved architectures and customer mandates
Work with Technology Framework teams to complete system documentation
Test and evaluate configurations in a lab environment
Provide security operations support as needed
Train junior team members as needed

Requirements

What you’ll need

Seven (7) years’ experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government
Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required; four (4) years of additional ISSE experience may be substituted for a bachelor’s degree
DoD 8570 compliance with IASAE Level 2 is required
TS/SCI with polygraph clearance
Knowledge of servers, virtualization, routers, switches, firewalls, VLANs, routing, and network segmentation
Demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms
Solid understanding of continuous monitoring, reauthorization, and configuration management processes
Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools
Knowledge of Windows, Linux, and network security controls implementation
Excellent communication and teamwork skills
Willingness to train junior team members
Candidate may be required to respond to after-hours requests in a 24 x 7 environment
Python (desired qualification)

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T wireline phone