ISSE – RMF & Security Engineer for DoD CNIC

Serco; Santa Fe (NM); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan with employer matching

Tuition reimbursement program

Job summary

Serco, a defense contractor, seeks an Information System Security Engineer (ISSE) with active DoD Top Secret/SCI clearance to support RMF accreditation efforts. You will help create SSPs, select security controls, and implement monitoring and security tooling across IS environments for CNIC program operations in Naples, Italy.

Responsibilities include developing SAR/POA&M, updating security packages, conducting periodic control assessments, and ensuring compliance with RMF and eMASS processes.

Qualifications

• Active DoD Top Secret/SCI clearance required.
• U.S. citizenship required.
• IAT Level II baseline certification required.
• Bachelor's degree in IT/Cyber Security or related field, or equivalent.
• 8+ years of cybersecurity/IT experience if no degree.

Responsibilities

• Support RMF categorization and SSP development.
• Assist in selecting security controls and CCIs for IS.
• Develop and implement ISCM plan/strategy.
• Implement and update IS security controls and scanners.
• Develop and review SAR, POA&M, and security packages.
• Maintain and upgrade security tooling and perform periodic scans.
• Provide RMF/eMASS related support and documentation.

Skills

DoD Top Secret/SCI clearance

U.S. Citizenship

IAT Level II baseline

RMF/eMASS knowledge

Travel up to 10%

Education

Bachelor's degree in IT/Cyber Security

High School diploma with 10+ years experience in lieu of degree

Tools

eMASS

ISCM tools & STIG implementation

Job description

Serco, a defense contractor, seeks an Information System Security Engineer (ISSE) with active DoD Top Secret/SCI clearance to support RMF accreditation efforts. You will help create SSPs, select security controls, and implement monitoring and security tooling across IS environments for CNIC program operations in Naples, Italy.

Responsibilities include developing SAR/POA&M, updating security packages, conducting periodic control assessments, and ensuring compliance with RMF and eMASS processes.