below marketmost similar roles pay hereabove market
This role pays less than
55%
of similar roles. Most pay
$154,600–$215,784
— the blue band above.
At the midpoint, this role pays about
$180k
versus about
$185k
for comparable roles.
Based on 240 similar postings.
Employer
About AT&T
AT&T is a US-based telecommunications company providing wireless, broadband, and fiber internet service along with phone and connectivity products for consumers and businesses.
AT&T currently has
87 open roles
on FindRole.
Listed pay typically runs
$98,100–$196,000
across 77 roles with salary data.
The Lead Technology Security Engineer joins the Integrity, Compliance & Risk Management Team to provide technical leadership for the Federal Aviation Administration - Enterprise Network Services program. This role involves translating FISMA, NIST Risk Management Framework, FEDRAMP, and CMMC requirements into scalable security practices. You will guide services through the full cybersecurity compliance lifecycle, including architecture design, control tailoring, and Authorization to Operate. Daily responsibilities include developing authorization packages, overseeing security assessments, and managing POA&M governance. You will utilize Xacta, ServiceNow, and Tenable Security Center to manage vulnerabilities and continuous monitoring. Key technical skills include expertise in identity and access management, Zero Trust principles, and infrastructure-as-code. The role ensures that cloud-based network solutions meet strict federal mandates while maintaining defensible security outcomes across the system lifecycle.
Lead NIST RMF lifecycle activities including system categorization, control selection, implementation, assessment, and continuous monitoring using Xacta.
Translate FISMA, FEDRAMP, and DoD requirements into actionable security control plans, technical standards, and operating procedures.
Develop and quality-assure authorization packages including system security plans, risk assessments, and privacy artifacts.
Oversee security control assessments to validate documentation, identify implementation deficiencies, and verify corrective actions.
Manage POA&M governance to prioritize and track the remediation of vulnerabilities identified through audits and penetration testing.
Establish continuous-compliance practices using automated evidence, security configuration baselines, and Tenable Security Center data.
Perform security architecture reviews across identity, network, cloud, and data domains to identify gaps and recommend risk-reduction measures.
Communicate security posture and residual risk to executive stakeholders using metrics derived from Xacta and ServiceNow.
What we're looking for
Active CISSP certification.
Public Trust clearance.
CSM or Sec+ certification (preferred).
Advanced proficiency with Xacta 360 or comparable GRC platforms (preferred).
Hands-on experience with Tenable Security Center and enterprise vulnerability management (preferred).
Working knowledge of the ServiceNow ecosystem, including GRC and vulnerability management (preferred).
Experience with FEDRAMP and CMMC Certification Process and deployment of certified cloud service offers (preferred).