Position Description & Qualifications

Are you an Information System Security Engineer (ISSE) looking for a place where you can make an impact every day? Serco is the place for you! Join our Defense team supporting our CNIC program in this exciting role based out of Washington, D.C..

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making.In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In this role, you will:

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).
• Support the determination and selection of the required and or applicable security controls, inherited controls, and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG).
• Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.
• Support the implementation of required and or applicable security controls.
• Support the development, review, and approval of Security Assessment Plan.
• Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code.
• Support the development and review of the System Assessment Report (SAR).
• Support the development of the Plan of Action and Milestones (POA&M).
• Support the development and update of the Security Authorization Package.
• Perform periodic assessment of the IS' security controls.
• Conduct remediation actions based on the results of ongoing monitoring of activities, assessment or risk, and outstanding items.
• Update the SSP, SAR, RAR and POA&M based on the results of the continuous monitoring process.

To be successful in this role, you will have:

• An active DoD Secret security clearance
  • U.S Citizenship required
• An up to date Information Assurance Technical (IAT) Level II baseline certification
• A Bachelors Degree with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline
  • Or a High School diploma/GED with Technical training related to Information Technology, Cyber Security, Computer Science, or related discipline with a minimum of 10 years of Cybersecurity or IT related knowledge and experience in lieu of degree
• Minimum 8 years of Cybersecurity or IT related knowledge and experience
• RMF and eMASS knowledge and experience
• Ability to travel up to 10% of the time

Additional desired experience and skills:

• At least HBSS or ACAS certification/training certificate or both (both courses are desired)
• RHEL certification and experience (desired)

To review Serco benefits please visit: https://careers.serco-na.com/us/en/what-we-offer.

Pay Transparency

Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance-so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements.

Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities.Benefits - Comprehensible benefits for full-time employees (part-time employees receive a limited package tailored to their role):

• Medical, dental, and vision insurance
• Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract
• 401(k) plan that includes employer matching funds
• Tuition reimbursement program
• Life insurance and disability coverage
• Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
• Birth, adoption, parental leave benefits
• Employee Assistance Plan

To review all Serco benefits please visit: https://careers.serco-na.com/us/en/about-us.

Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations. Please submit applications exclusively through Serco's external (or internal) career site.