Senior ISSE — RMF/ISCM Specialist in Naples

Serco; Annapolis (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Serco Inc. is seeking an Information System Security Engineer (ISSE) to support the CNIC program from Naples, Italy, with RMF authorization efforts including IATO/ATO and SSP development. The role requires DoD TS/SCI clearance, U.S. citizenship, IAT II, and 8+ years in cybersecurity or IT.

Responsibilities include RMF categorization, control selection, ISCM planning, security scanning, SAR/POA&M development, and continuous monitoring updates. Travel up to 10% is required.

Qualifications

• Active DoD Top Secret/SCI clearance required.
• U.S. citizenship required.
• IAT Level II baseline certification required.
• Bachelor's degree in IT, Cyber Security, CS, or related field, or HS diploma with 10+ years in lieu of degree.
• Minimum 8 years of cybersecurity/IT knowledge and experience.
• RMF and eMASS knowledge and experience.
• Travel up to 10% of the time and pass health standards for AFRICOM travel.
• HBSS/ACAS certification/training; RHEL certification preferred.

Responsibilities

• Support RMF categorization and SSP development for IS accreditation.
• Determine and select security controls and STIG-related items.
• Develop MOUs/MOAs and ISCM plan/strategy.
• Implement and monitor security controls; run periodic scans.
• Develop and review SAR, POA&M, and Security Authorization Package.
• Update SSP/SAR/RAR/POA&M based on continuous monitoring results.

Skills

Security clearance TS/SCI

U.S. Citizenship

IAT Level II

RMF and eMASS

8+ years cybersecurity/IT

RMF knowledge

Travel up to 10%

Information Assurance

Education

Bachelor's degree in IT/Cyber Security/CS

High School diploma with 10+ years experience in lieu of degree

Tools

eMASS

HBSS

ACAS

RHEL certification

Job description

Serco Inc. is seeking an Information System Security Engineer (ISSE) to support the CNIC program from Naples, Italy, with RMF authorization efforts including IATO/ATO and SSP development. The role requires DoD TS/SCI clearance, U.S. citizenship, IAT II, and 8+ years in cybersecurity or IT.

Responsibilities include RMF categorization, control selection, ISCM planning, security scanning, SAR/POA&M development, and continuous monitoring updates. Travel up to 10% is required.