Lead Technology Security - ISSE (Government)

About the role

AT&T Global Public Sector is looking for a Lead Technology Security - ISSE (Information Systems Security Engineer) in Chantilly, Virginia. The role leads the vulnerability-management program for the Tenable Security Center capability serving civilian, DoD, state and local government customers. It translates FISMA, NIST RMF and agency requirements into measurable security processes and owns the vulnerability lifecycle, from scan governance and finding analysis to remediation tracking, reporting and continuous monitoring.

Key responsibilities

• Manage Tenable Security Center architecture and operations, including scan strategies, repositories, scanners, policies, schedules, asset inventories, dashboards and reporting.
• Own the end-to-end vulnerability management lifecycle: asset onboarding, scanning, validation, prioritization, remediation tracking, exception management, retesting and closure.
• Integrate Tenable findings with Xacta 360 and ServiceNow workflows for continuous monitoring, POA&M management, control evidence, risk tracking and authorization reporting.
• Analyze vulnerability data, validate findings, identify coverage gaps and credentialing issues, and give remediation guidance to technical teams.
• Translate FISMA, NIST RMF, NIST SP 800-53 and agency requirements into vulnerability management processes, controls and governance.
• Develop executive dashboards, metrics, trend analysis and reporting on security posture and residual risk.
• Establish vulnerability management governance: SOPs, SLAs, escalation paths, evidence requirements, quality controls and accountability.
• Correlate vulnerabilities with security events, assets, identity data, privileged access, network telemetry, DNS/IPAM and ServiceNow records, and partner with infrastructure, security operations, compliance and system-owner teams.

Required profile

• Bachelor's degree.
• Active CISSP certification (required).
• Independent technical judgment, strong process ownership, clear documentation and communication skills.
• Ability to lead cross-functional vulnerability-management activities and escalate material risks to senior leadership.

Required skills

• Hands-on experience with Tenable Security Center and enterprise vulnerability management.
• Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management.
• Strong expertise in identity and access management.
• Experience with FEDRAMP and CMMC certification processes and certified cloud service offers is desired.
• Advanced proficiency with Xacta 360 or comparable GRC platforms is desired.

What we offer

• Salary of $143,800 - $215,800 USD annually, depending on geography, experience and education.
• Medical, dental and vision coverage, 401(k) plan and tuition reimbursement.
• Paid time off (at least 23 days of vacation per year) and paid parental and caregiver leave.
• Adoption reimbursement, disability benefits, life insurance and employee assistance programs.
• Discounts of up to 50% on AT&T mobility plans, internet and phone.

This is a full-time, onsite role of 40 hours per week, five days a week, with no relocation offered. No employer visa sponsorship is accepted.