Position Description

Are you an Security Engineer looking for a place where you can make an impact every day? Serco is the place for you! Join our Defense team supporting our CNIC program in this exciting role based out of Naples, Italy.

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making.

In support of this effort the CNIC N6 Security Engineer will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In this role, you will: 

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP)
• Support the determination and selection of the required and or applicable security controls, inherited controls, and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG)
• Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy
• Support the implementation of required and or applicable security controls
• Support the development, review, and approval of Security Assessment Plan
• Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code
• Support the development and review of the System Assessment Report (SAR)
• Support the development of the Plan of Action and Milestones (POA&M)
• Support the development and update of the Security Authorization Package
• Perform periodic assessment of the IS’ security controls
• Conduct remediation actions based on the results of ongoing monitoring of activities, assessment or risk, and outstanding items
• Update the SSP, SAR, RAR and POA&M based on the results of the continuous monitoring process

Qualifications

To be successful in this role, you will have:

• An active DoD Secret Security Clearance
• Current 8570 IAT Level II certification (8570 IAM Level III preferred)
• Current DoD 8140 Intermediate Systems Security Analyst certification (advanced preferred)
• Bachelor's degree in Engineering, Computer Science, Information Systems, or related field
• 5 years' of relevant Cybersecurity experience
• Training or experience in ICS and SCADA
• Understanding of ICS/SCADA IT & OT Protocols such as IP/TCP, SSL/TLS, MODBUS/DNP3/PROFINET SCADA and Network Interfaces
• Demonstrated understanding of ICS/SCADA Cyber protections and assessments
• Hands-on experience of applying updates, patches and STIGs to Windows workstations, servers and other network equipment. Configuration and maintenance of asset inventory databases
• Prior knowledge and experience in installing, maintaining and using ACAS, HBSS, SCAP and other cybersecurity related tools

Additional desired experience and skills:

• CSSA (Certified SCADA Security Architect)
• GICSP (Global Industrial Control Security Professional)
• RHEL, HBSS, or ACAS certification
• Experience in Information Technology to include Cybersecurity
• 8570 IAM Level III Certification
• Navy RMF and eMASS experience
• Experience with various information technologies, e.g., Linux, Windows, Cisco

Company Overview

Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000 employees strive to make an impact every day across 100 sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters.

To review Serco benefits please visit: https://www.serco.com/na/careers/benefits-of-choosing-serco. If you require an accommodation with the application process please email: careers@serco-na.com or call the HR Service Desk at 800-628-6458, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email.

Candidates may be asked to present proof of identify during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice.

Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email Agencies@serco-na.com.

Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.