Information Systems Security Engineer – RMF, ISSE II

AT&T

Information Systems Security Engineer ensuring RMF compliance on systems and Security Plans. Collaborating with teams to validate controls and serve as a technical security engineer at AT&T.

Posted 4/29/2026full-timeColumbia • Maryland • 🇺🇸 United StatesSeniorLead💰 $98,100 - $180,300 per yearWebsite

Tech Stack

Tools & technologies

FirewallsLinuxSplunk

About the role

Key responsibilities & impact

Serve as the technical security engineer for assigned systems and System Security Plans (SSPs), ensuring full lifecycle RMF compliance.
Provide technical input for Authorization to Operate (ATO) packages, risk acceptance decisions, and continuous monitoring efforts.
Implement and validate security controls from NIST SP 800-53 and serve as technical security liaison with technology frameworks to complete.
Ensure all controls are properly mapped, implemented, and tested within the Security Control Traceability Matrix (SCTM) and respond to Security Assessment Report (SAR).
Collaborate with the vulnerability scanning team (e.g., Tenable operators) to ensure scan compliance, findings are addressed, retested, and reflected accurately in the system’s risk posture.
Support continuous monitoring activities, including vulnerability tracking, control reassessments, and serve as technical security liaison with technology frameworks.
Coordinate with ISSOs and system administrators to document and remediate vulnerabilities, control deficiencies, and Plan of Action & Milestones (POA&M) items.
Lead or support reauthorization efforts, ensuring all system technical artifacts are updated, validated, and submitted on schedule.
Evaluate and document security-relevant changes, assessing configuration updates, patches, or system modifications for RMF impact.
Interface with Security Architect to ensure designs, configurations, and security mitigations align with approved architectures and customer mandates.
Work with Technology Framework teams to complete all system documentation.
Test and evaluate configurations in a lab environment.
Knowledge of servers, virtualization, routers, switches, and firewalls as well as VLANS, routing and network segmentation.
Demonstrated experience authoring and maintaining System Security Plans (SSPs), SCTMs, and POA&Ms.
Solid understanding of continuous monitoring, reauthorization, and configuration management processes.
Hands-on familiarity with Tenable, Splunk, STIG Viewer, and customer security compliance management tools.
Knowledge of Windows, Linux, and network security controls implementation.

Requirements

What you’ll need

Fourteen (14) years’ experience as an ISSE on programs and contracts of similar scope, type, and complexity within the Federal Government is required.
Bachelor’s degree in Computer Science, Information Assurance, Information Security System Engineering, or related discipline from an accredited college or university is required.
Four (4) years of additional ISSE experience may be substituted for a bachelor’s degree
Active DoD 8570 IAT Level II or III certification (e.g., Security+, CASP, CISSP, or equivalent).

Benefits

Comp & perks

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays) *Pro-rated when working less than 40 hrs/wk.
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

technical security engineeringrisk management framework (RMF)security controls implementationvulnerability trackingconfiguration managementcontinuous monitoringsystem security plans (SSPs)security control traceability matrix (SCTM)security assessment report (SAR)network security controls

Soft Skills

collaborationdocumentationleadershipcommunicationproblem-solving

Certifications

DoD 8570 IAT Level IIDoD 8570 IAT Level IIISecurity+CASPCISSP