CNIC N6 Information System Security Engineer - (Naples, Italy)

Serco; Salem (OR); On-site; USD 120,000 - 165,000; Full time

Job summary

Serco is seeking an Information System Security Engineer (ISSE) to support the CNIC program. The role requires active DoD TS/SCI clearance and U.S. citizenship.

Based out of Naples, Italy, the position focuses on RMF accreditation, ISCM planning, and continuous monitoring to maintain IATO/ATO readiness. The successful candidate will categorize IS, select controls, develop SSP and SAR, implement and monitor security tools, and coordinate MOUs/MOAs with travel up to 10%.

Qualifications

• Active DoD Top Secret/SCI clearance.
• U.S. citizenship is required.
• Bachelor's degree with technical IT/Cyber background or HS with 10 years experience.
• Minimum 8 years of cybersecurity/IT experience.
• RMF and eMASS knowledge.
• Ability to travel up to 10%.
• Ability to obtain vaccinations for AFRICOM AOR (travel).

Responsibilities

• Support RMF categorization and SSP development.
• Determine and select the required security controls and CCIs for the IS.
• Develop MOU/MOA and ISCM plan/strategy.
• Implement required security controls.
• Develop, review, and approve Security Assessment Plan.
• Operate and upgrade the IS security scanning tool; perform periodic scans.
• Develop and review the System Assessment Report (SAR).
• Develop POA&M and update Security Authorization Package.
• Perform periodic assessment of the IS security controls.
• Conduct remediation actions based on monitoring and risk results.
• Update SSP/SAR/RAR/POA&M based on continuous monitoring results.

Skills

RMF Knowledge

eMASS Knowledge

Security Scanning

DoD Top Secret/SCI clearance

U.S. Citizenship

Travel availability

Education

Bachelor's Degree in IT/Cyber Security/CS

High School diploma with 10 years experience in lieu of degree

Tools

HBSS

ACAS

RHEL Certification

eMASS

Job description

Position Description & Qualifications

Are you an Information System Security Engineer (ISSE) looking for a place where you can make an impact every day? Serco is the place for you! Join our Defense team supporting our CNIC program in this exciting role based out of Naples, Italy.

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making. In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In this role, you will:

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).




• Support the determination and selection of the required and or applicable security controls, inherited controls, and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG).




• Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.




• Support the implementation of required and or applicable security controls.




• Support the development, review, and approval of Security Assessment Plan.




• Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code.




• Support the development and review of the System Assessment Report (SAR).




• Support the development of the Plan of Action and Milestones (POA&M).




• Support the development and update of the Security Authorization Package.




• Perform periodic assessment of the IS’ security controls.




• Conduct remediation actions based on the results of ongoing monitoring of activities, assessment or risk, and outstanding items.




• Update the SSP, SAR, RAR and POA&M based on the results of the continuous monitoring process.

To be successful in this role, you will have:

• An active DoD Top Secret/SCI security clearance




• U.S Citizenship required




• An up to date Information Assurance Technical (IAT) Level II baseline certification




• A Bachelors Degree with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline




• Or a High School diploma/GED with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline with a minimum of 10 years of Cybersecurity or IT related knowledge and experience in lieu of degree




• Minimum 8 years of Cybersecurity or IT related knowledge and experience




• RMF and eMASS knowledge and experience




• Ability to travel up to 10% of the time




• Ability to pass and maintain physical health standards required for travel to the AFRICOM AOR, to include getting the required vaccinations




• Valid/Active U.S Passport

Additional desired experience and skills:

• At least HBSS or ACAS certification/training certificate or both (both courses are desired)




• RHEL certification and experience (desired)

Company Overview

Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.

Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email [e-mail] .

Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Pay Transparency

Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance—so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.

Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.

Benefits – Comprehensible benefits for full-time employees (part-time employees receive a limited package tailored to their role):

• Medical, dental, and vision insurance




• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract




• 401(k) plan that includes employer matching funds




• Tuition reimbursement program




• Life insurance and disability coverage




• Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection




• Birth, adoption, parental leave benefits




• Employee Assistance Plan