CNIC N6 Information System Security Engineer - (Naples, Italy)

Serco; Dover (DE); On-site; USD 110,000 - 150,000; Full time

Job summary

Serco Inc. is seeking an Information System Security Engineer to support the CNIC program in Naples, Italy. The role focuses on RMF accreditation, SSP development, and implementing security controls to achieve IATO/ATO.

This position requires a DoD TS/SCI clearance, IAT Level II, and RMF/eMASS experience. The ideal candidate will also hold a Bachelor's degree in IT/Cyber Security or a related field, with up to 10% travel and a valid U.S. passport.

Qualifications

• Active DoD Top Secret/SCI clearance is required.
• US citizenship is required.
• IAT Level II baseline certification is required.
• Bachelors degree in IT/Cyber Security/Computer Science or related discipline required; an alternative with 10 years of cybersecurity/IT experience may substitute.
• Minimum 8 years of cybersecurity/IT knowledge/experience.
• RMF and eMASS knowledge/experience expected.

Responsibilities

• Support RMF authorization for IS through SSP development and accreditation.
• Determine applicable security controls and CCIs for the IS/SSP.
• Develop MOUs/MOAs and ISCM plan/strategy.
• Implement and maintain security controls and scanners.
• Develop/review SAR, and POA&M; update security packages.
• Conduct periodic assessments and remediation based on continuous monitoring results.
• Update SSP/SAR/RAR/POA&M as needed.

Skills

DoD TS/SCI clearance

U.S. Citizenship

RMF knowledge

eMASS knowledge

IAT Level II

Travel up to 10%

U.S. Passport

Education

Bachelor's degree in IT/Cyber Security/CompSci

Technical training related to IT/Cyber Security

High School diploma with 10+ years experience in lieu of degree

Tools

HBSS/ACAS certification/training

RHEL certification

Job description

Position Description & Qualifications

Are you an Information System Security Engineer (ISSE) looking for a place where you can make an impact every day? Serco is the place for you! Join our Defense team supporting our CNIC program in this exciting role based out of Naples, Italy.

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making. In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In this role, you will:

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).
• Support the determination and selection of the required and or applicable security controls, inherited controls, and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG).
• Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.
• Support the implementation of required and or applicable security controls.
• Support the development, review, and approval of Security Assessment Plan.
• Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code.
• Support the development and review of the System Assessment Report (SAR).
• Support the development of the Plan of Action and Milestones (POA&M).
• Support the development and update of the Security Authorization Package.
• Perform periodic assessment of the IS’ security controls.
• Conduct remediation actions based on the results of ongoing monitoring of activities, assessment or risk, and outstanding items.
• Update the SSP, SAR, RAR and POA&M based on the results of the continuous monitoring process.

To be successful in this role, you will have:

• An active DoD Top Secret/SCI security clearance
• U.S Citizenship required
• An up to date Information Assurance Technical (IAT) Level II baseline certification
• A Bachelors Degree with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline
• Or a High School diploma/GED with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline with a minimum of 10 years of Cybersecurity or IT related knowledge and experience in lieu of degree
• Minimum 8 years of Cybersecurity or IT related knowledge and experience
• RMF and eMASS knowledge and experience
• Ability to travel up to 10% of the time
• Ability to pass and maintain physical health standards required for travel to the AFRICOM AOR, to include getting the required vaccinations
• Valid/Active U.S Passport

Additional desired experience and skills:

• At least HBSS or ACAS certification/training certificate or both (both courses are desired)
• RHEL certification and experience (desired)

Company Overview

Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.

Candidates may be asked to present proof of identity during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.

Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email [e-mail] .

Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Pay Transparency

Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance—so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.

Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.

Benefits – Comprehensible benefits for full-time employees (part-time employees receive a limited package tailored to their role):

• Medical, dental, and vision insurance
• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
• 401(k) plan that includes employer matching funds
• Tuition reimbursement program
• Life insurance and disability coverage
• Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Employee Assistance Plan

Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans.