This role pays less than
99%
of similar roles. Most pay
$138,881–$190,075
— the shaded band above.
At the midpoint, this role pays about
$93k
versus about
$164k
for comparable roles.
Based on 240 similar postings.
Employer
About AT&T
AT&T is a US-based telecommunications company providing wireless, broadband, and fiber internet service along with phone and connectivity products for consumers and businesses.
AT&T currently has
61 open roles
on FindRole.
Listed pay typically runs
$117,350–$226,800
across 56 roles with salary data.
Information Systems Security Engineer 0 (ISSE0) (Government) joins the RIS I team to manage cyber risk and enhance security posture through vulnerability management and technical assessments. The role involves performing vulnerability scans, analyzing results, and collaborating with framework teams to remediate identified weaknesses. Day-to-day responsibilities include configuring and maintaining Tenable.sc and Nessus, conducting STIG compliance scans, and integrating data into Splunk for correlation and automated reporting. The engineer will also develop dashboards, support RMF activities, and evaluate configurations in lab environments. Key technical requirements include proficiency with servers, virtualization, routers, switches, firewalls, and network segmentation. Required skills include working knowledge of DoD STIGs and the NIST 800-53 Risk Management Framework process. Candidates must possess a TS/SCI with polygraph and meet DoD 8570.01-M Information Assurance Technical requirements.
Configure, operate, and maintain Tenable.sc and Nessus to identify and track vulnerabilities across all environments.
Conduct STIG compliance scans and interpret results to validate system hardening and control effectiveness.
Analyze vulnerability data and trends to create actionable findings and coordinate remediation efforts with technical teams.
Integrate vulnerability and compliance data into Splunk for correlation, trend analysis, and automated reporting.
Develop dashboards and reports to visualize system risk posture and track remediation progress.
Provide technical input for Risk Management Framework (RMF) activities and security control documentation.
Create and refine scanning policies, baselines, and standard operating procedures to improve compliance consistency.
Support audits by providing detailed vulnerability data and evidence of STIG compliance.
What we're looking for
TS/SCI clearance with polygraph is required.
A Bachelor's degree in Computer Science, Information Assurance, Information Security System Engineering, or a related field is required.
An Associate's degree and Security+ certification plus two years of general IT experience is an acceptable alternative to a Bachelor's degree.
A High School Diploma/GED with four years of general IT experience, including at least one year of information systems security experience, is an acceptable alternative.
Active DoD 8570.01-M compliance with IAT Level II (Sec+) or IASAE Level 1 (CASP or CISSP) is required.
Experience using Tenable.sc and Nessus to identify and track vulnerabilities is required.
Working knowledge of DoD STIGs, RMF process (NIST 800-53), and Splunk for data analysis and reporting is required.
Knowledge of servers, virtualization, routers, switches, firewalls, VLANS, routing, and network segmentation is required.
RMF
STIGs
SCAP
Information Assurance
Cybersecurity
System Security Engineering
Security+
CISSP
CISM
CAP
ISSEP
Risk Management
ATO
System Administration
Risk Management Framework
RMF
Information Assurance
DoD 8570
IAM Level I
System Security Plans
POA&M
Configuration Management
Encryption
Classified Systems
Information Systems Security