Are you an Information System Security Engineer (ISSE) looking for a place where you can make a difference every day? Serco is the place for you! We have an exciting opportunity supporting the United States Navy and our CNIC N6 program at Naval Station Norfolk.

CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate process or improve transparency for analytics and decision making. The CNIC N6 ISSE is tasked supporting the authorization of systems through the RMF process to obtain an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).

In this role, you will:

• Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).
• Select required/applicable security controls for the IS, implementing said controls in the SSP to the IS and supporting the development, review and approval of Security Assessment Plan (SAP) which governs the process to assess the IS’ security controls
• Perform periodic security scans of the IS using required IS security scanning tools such as ACAS
• Acquire and maintain accounts needed in the RMF process, such as Enterprise Mission Assurance Support Service (eMASS) accounts or other accounts needed for RMF
• Perform regular patching or upgrade of all required security scanning tools
• Support decommissioning and disposal by identifying, assessing and implementing required disposal policies, guidance and procedures, and device data sanitation policies or guidance
• Attend the CCB meetings and advise the board on the security impact of the proposed changes to the IS
• Support the registration of the IS in DITPR-DON as well as the registration, maintenance of the registration or update the registration of any software required within the IS in DADMs
• Perform system administration, configuration, maintenance, troubleshooting and operation of cybersecurity related systems or servers, its components, clients, etc
• Maintain inventory of IT related assets that falls under the cybersecurity Office’s responsibility

To be successful in this role, you will have:

• An active DoD Secret clearance
• An active 8570 DoD IAT Level II compliant certification
• Bachelors degree in Engineering, IT, Cybersecurity or related field
• A minimum of 8 years' experience in an IT or cybersecurity environment supporting the Department of Defense
• Thorough RMF and eMass knowledge and experience
• HBSS or ACAS certification/training certificate
• Knowledge and experience in installing, maintaining and using ACAS, HBSS, SCAP and other cybersecurity related tools
• Working knowledge and experience on some or all of the following application and programing languages: ColdFusion, jQuery, SQL, SAP, Rest API

Additional desired experience and skills:

• RHEL certification and experience
• An active 8570 DoD IAM Level III compliant certification

Apply today to discover your place in our world!