CNIC N6 Information System Security Engineer - (Washington, D.C.)

Serco; Fredericksburg (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Serco is seeking an Information System Security Engineer (ISSE) to support the CNIC program in the Washington, D.C. area. The role focuses on RMF-based authorization, SSP development, and security control implementation to achieve IATO/ATO readiness.

The candidate will work on IS categorization, ISCM planning, continuous monitoring, and security assessment artifacts, with requirements for DoD clearance and travel up to 10%.

Qualifications

• Active DoD Secret security clearance is required.
• U.S. Citizenship required.
• Bachelor's Degree with technical IT, Cyber Security, CS, or related discipline; or HS diploma/GED with 10 years of relevant experience.
• Minimum 8 years of cybersecurity or IT knowledge and experience.
• RMF and eMASS knowledge and experience.
• Ability to travel up to 10% of the time.

Responsibilities

• Support RMF categorization and development of the System Security Plan (SSP).
• Assist in selecting required security controls and Common Control Identification (CCI).
• Develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.
• Assist in implementing and validating security controls.
• Develop, review, and approve Security Assessment Plans.
• Maintain and upgrade IS security scanning tools and conduct periodic scans.
• Develop and review the System Assessment Report (SAR).
• Develop and update the Plan of Action and Milestones (POA&M).
• Prepare and update the Security Authorization Package.
• Perform periodic assessments of IS security controls.
• Lead remediation actions from monitoring results and risk findings.
• Update SSP, SAR, RAR and POA&M based on monitoring results.

Skills

DoD Secret clearance

IAT Level II

RMF knowledge

eMASS knowledge

Up to 10% travel

Education

Bachelor's degree in IT/Cyber Security/CS

High School diploma with 10 years Cybersecurity/IT experience in lieu of degree

Tools

RHEL certification

Job description

Position Description & Qualifications

Are you an

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making. In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

Position Description & Qualifications

Are you an Information System Security Engineer (ISSE) looking for a place where you can make an impact every day? Serco is the place for you! Join our Defense team supporting our CNIC program in this exciting role based out of Washington, D.C.

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making. In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In This Role, You Will

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).
• Support the determination and selection of the required and or applicable security controls, inherited controls, and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG).
• Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.
• Support the implementation of required and or applicable security controls.
• Support the development, review, and approval of Security Assessment Plan.
• Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code.
• Support the development and review of the System Assessment Report (SAR).
• Support the development of the Plan of Action and Milestones (POA&M).
• Support the development and update of the Security Authorization Package.
• Perform periodic assessment of the IS’ security controls.
• Conduct remediation actions based on the results of ongoing monitoring of activities, assessment or risk, and outstanding items.
• Update the SSP, SAR, RAR and POA&M based on the results of the continuous monitoring process.

To Be Successful In This Role, You Will Have

• An active DoD Secret security clearance
  • U.S Citizenship required
• An up to date Information Assurance Technical (IAT) Level II baseline certification
• A Bachelors Degree with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline
• Or a High School diploma/GED with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline with a minimum of 10 years of Cybersecurity or IT related knowledge and experience in lieu of degree
• Minimum 8 years of Cybersecurity or IT related knowledge and experience
• RMF and eMASS knowledge and experience
• Ability to travel up to 10% of the time

Additional Desired Experience And Skills

• At least HBSS or ACAS certification/training certificate or both (both courses are desired)
• RHEL certification and experience (desired)

Company Overview

Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.

To review Serco benefits please visit: https://careers.serco-na.com/us/en/what-we-offer. If you require an accommodation with the application process please email: [e-mail] or call the HR Service Desk at 800-628-6458, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.

Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government‑issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.

Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email [e-mail].

Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.

Pay Transparency

Our Total Rewards package includes competitive pay, performance‑based incentives, and benefits that promote well‑being and work‑life balance—so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time‑off programs that support work‑life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.

Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job‑related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long‑term incentive opportunities. Benefits – Comprehensible benefits for full‑time employees (part‑time employees receive a limited package tailored to their role):

• Medical, dental, and vision insurance
• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
• 401(k) plan that includes employer matching funds
• Tuition reimbursement program
• Life insurance and disability coverage
• Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Employee Assistance Plan

To review all Serco benefits please visit: https://careers.serco-na.com/us/en/about-us.

Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations. Please submit applications exclusively through Serco’s external (or internal) career site. If an applicant has any concerns with job posting compliance, please send an email to: [e-mail].