CNICInformation System Security Engineer
Pubblicato il 17-08-2026 - Serco in Napoli
Position Description & Qualifications
Are you an Information System Security Engineer (ISSE) looking for a place where you can make an impact every day? Serco is the place for you Join our Defense team supporting our CNIC program in this exciting role based out of Naples, Italy.
CNIC Regional Offices enable improving operational performance and cost reductions through business process definition, analysis, and development of technical capabilities which automate processes or improve transparency for analytics and decision making. In support of this effort the CNIC N6 Engineer Scientist will support the authorization of systems through the Risk Management Framework (RMF) in order to get an Interim Authority to Operate (IATO) or an Authority to Operate (ATO).
In This Role, You Will
- Support the categorization of the Information System (IS) to be accredited through the RMF process and support the development of the System Security Plan (SSP).
- Support the determination and selection of the required and or applicable security controls, inherited controls,
and Common Control Identification (CCI) for the IS, Security Technical Implementation Guide (STIG).
- Support the development of Memorandum of Understanding (MOU) or Memorandum of Agreement (MOA) and develop and implement an Information Security Continuous Monitoring (ISCM) plan/strategy.
- Support the implementation of required and or applicable security controls.
- Support the development, review, and approval of Security Assessment Plan.
- Implement, maintain, and upgrade the approved IS security scanning tool and perform periodic security scans of the IS and business application code.
- Support the development and review of the System Assessment Report (SAR).
- Support the development of the Plan of Action and Milestones (POA&M;).
- Support the development and update of the Security Authorization Package.
- Perform periodic assessment of the IS’ security controls.
- Conduct remediation actions based on the results