AT&T Global Public Sector is a trusted provider of secure, IP enabled, cloud-based, network solutions and professional services to the Federal Government. We are dedicated to recruiting, developing and empowering a diverse, high-performing workforce that is passionate about what they do, committed to our shared values and dedicated to our customers’ mission.

Our National Security Team supports our Nation’s Intelligence Community (IC), providing, operating, and assuring critical voice, video, and collaboration services for the full spectrum of IC operations.

AT&T has an opening for a highly motivated cyber professional to support the Gov customers and AT&T Core organizations, in providing cyber security support across the region.

Job Duties/Responsibilities:

Perform ISSE responsibilities for implementing, and enforcing information systems security policies, standards, and methodologies

Must have extensive Nessus 7.x hands-on experience with installing, configuring, building scan policies, loading plugins, running scans, building POA&Ms, leading meetings to close vulnerabilities, and working with Government ISSOs and other teams to identify and manage risks

Perform responsibilities for maintaining the appropriate operational IA posture for a system, program, or enclave to include working independently and directly with customers and customer systems

Develop system hardening guides for new systems in concert with security engineering teams

Develop plan of action milestones and enforce closure of critical through low vulnerabilities with engineering teams

Develop and maintain systems security plans (SSP) from start to finish to conduct security assessment and authorization (SA&A) reviews with government auditors for authorization to operate (ATO)

Assist in evaluation of security solutions to ensure security requirements for processing classified information

Assist with CM for information system security software, hardware, and firmware

Assist with preparation and maintenance of documentation

Maintain records on workstations, servers, routers, firewalls, intelligent hubs, network switches, etc. to include system upgrades

Evaluate security solutions to ensure they meet security requirements for processing classified information

Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies

Maintain operational security posture for information systems or programs

Develop and maintain documentation for C&A in accordance with ODNI, CNSSI, NIST, DSS, and DoD policies and guidelines

Develop and update the system security plan, continuous monitoring plan, and other IA documentation

Provide CM for security-relevant information system software, hardware, and firmware

Assist with management of security aspects of information systems and perform day-today security operations of the system

Develop system security policies and plans and ensure compliance

Administer user identification and authentication mechanism of the Information System (IS)

Plan and coordinate IT security programs and policies

Manage and control changes to systems and assess security impacts of those changes

Obtain C&A and ATO for ISs under purview

Provide support for a program, organization, system, or enclave’s information assurance program

Serve as Approval Authority for ISs under their control

Interact with customers, IT staff, and high-level corporate officers to define and achieve required IA objectives

Occasional customer facing meetings will be required

Required Clearance:

TS SCI (#ts/sci)

Required Qualifications:

The role as Information Systems Security Engineer (ISSE) provides support for a program, organization, system, or enclave’s information assurance program.

Provides support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies.

Maintains operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed.

Assists with the management of security aspects of the information system and performs day-to-day security operations of the system. Evaluate security solutions to ensure they meet security requirements for processing classified information.

Performs vulnerability/risk assessment analysis to support certification and accreditation.

Provides configuration management (CM) for information system security software, hardware, and firmware.

Manages changes to system and assesses the security impact of those changes.

Prepares and reviews documentation to include System Security Plans (SSPs), Risk Assessment Reports, Certification & Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).

Supports security authorization activities in compliance with NSA/CSS Information System Certification and Accreditation Process (NISCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP).

Desired Qualifications:

BS/BA degree is desirable.

ISSE background with RMF and Splunk experience are preferred. Candidate should have DoD 8570 certification as CISSP, GSSE, SCNA, or CISA for this level of effort.

Demonstrated experience of at least three (3) years shall be within the domain areas of Information Assurance and Information Technology.

Ready to join our team? Apply today!