RMF Information Security Engineer – CNIC, Naples

Serco; Saint Paul (MN); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with employer matching

Tuition reimbursement

Life and disability insurance

Parental leave

Employee Assistance Plan

Job summary

Serco Inc. seeks an Information System Security Engineer (ISSE) supporting the CNIC program. The role focuses on RMF authorization, SSP development, ISCM planning, and continuous monitoring for systems requiring IATO/ATO. Requires DoD TS/SCI, U.S.

citizenship, and 8+ years of cybersecurity/IT experience. Travel up to 10% and ability to obtain required vaccinations for AFRICOM AOR. The CNIC team emphasizes risk management, security control implementation, and collaboration with stakeholders to

Qualifications

• Active DoD Top Secret/SCI clearance required.
• U.S. Citizenship required.
• Bachelor’s degree in IT, Cyber Security, Computer Science, or related field, or equivalent experience.
• 8+ years of Cybersecurity/IT experience.
• RMF and eMASS knowledge.
• Ability to travel up to 10%.

Responsibilities

• Support RMF categorization and SSP development.
• Select and implement applicable security controls and STIGs.
• Develop MOUs/MOAs and ISCM strategy.
• Implement and upgrade security scanning tools and perform periodic scans.
• Assist in SAR, POA&M, and Security Authorization Package updates.
• Perform ongoing assessment of security controls and remediation actions.
• Maintain SSP, SAR, RAR, and POA&M based on monitoring results.

Skills

RMF

ISCM

SSP

STIG

Security controls

eMASS

IAT Level II

HBSS/ACAS

Education

Bachelor's degree in IT / Cyber Security

High School diploma + 10 years experience

Tools

RHEL Certification

HBSS / ACAS training

Security scanning tools

Job description

Serco Inc. seeks an Information System Security Engineer (ISSE) supporting the CNIC program. The role focuses on RMF authorization, SSP development, ISCM planning, and continuous monitoring for systems requiring IATO/ATO. Requires DoD TS/SCI, U.S.

citizenship, and 8+ years of cybersecurity/IT experience. Travel up to 10% and ability to obtain required vaccinations for AFRICOM AOR. The CNIC team emphasizes risk management, security control implementation, and collaboration with stakeholders to