Information System Security Engineer | Naples, Italy
Deloitte US · Rosslyn · $113,000–$188,400 (stated in the posting)
Our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients’ success. You’ll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses. Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation.
Work you'll do
As a(n) PROJECT - Delivery Management Engineer III on the Government and Public Services Hybrid Cloud Infrastructure team, you will be responsible for...
- Support the Risk Management Framework (RMF) lifecycle for NAVFAC Facility Related Control Systems (FRCS), including system categorization and security-control selection, implementation, and assessment.
- Coordinate with the EURAFCENT Information System Security Manager (ISSM) and onsite Information System Security Engineers (ISSEs) to align tasking, testing methods, system configurations, hardware and software inventories, and system-performance analyses.
- Analyze information technology and operational technology (IT/OT) cyber risk and recommend security controls and countermeasures that improve the confidentiality, integrity, availability, authenticity, non-repudiation, and resiliency of FRCS data and systems.
- Conduct vulnerability scans and compliance testing using Assured Compliance Assessment Solution (ACAS), Nessus, and Security Technical Implementation Guide (STIG) checklists; document findings and remediation feedback.
- Support FRCS site-survey planning, findings analysis, and after-action reporting for the EURAFCENT area of responsibility from the Naples, Italy location.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte’s Government and Public Services (GPS) practice – our people, ideas, technology and outcomes—is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks and AI infrastructure from the core to the edge, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances.
Qualifications
Required:
- One of the following: a bachelor’s degree in Information Technology or Cybersecurity; an associate degree in Information Technology or Cybersecurity and 4+ years of cybersecurity experience; or a high school diploma and 8+ years of cybersecurity experience.
- 5+ years of military or civilian experience in one or more of the following: Risk Management Framework support, Security Technical Implementation Guide application, cybersecurity vulnerability scanning, information technology or operational technology cybersecurity support, or security-control assessments.
- Experience obtaining Authority to Operate (ATO) approvals and supporting the Risk Management Framework (RMF) process.
- Experience developing RMF artifacts.
- Experience implementing security controls, patching vulnerabilities, conducting vulnerability scans, and completing STIG checklists.
- You can expect to co-locate on average 5 times a week with variations based on types of work/projects and client locations.
- Ability to work 100% onsite in Naples, Italy.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Experience implementing Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
- Experience conducting Assured Compliance Assessment Solution (ACAS) scans and generating reports.
- Experience with industrial communication protocols.
- Experience supporting utility information systems or energy-management technologies.
For individuals assigned and/or hired to work in Naples, Italy, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Naples, Italy and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $113,000 to $188,400.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients’ success. You’ll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses. Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation.
Work you'll do
As a(n) PROJECT - Delivery Management Engineer III on the Government and Public Services Hybrid Cloud Infrastructure team, you will be responsible for...
- Support the Risk Management Framework (RMF) lifecycle for NAVFAC Facility Related Control Systems (FRCS), including system categorization and security-control selection, implementation, and assessment.
- Coordinate with the EURAFCENT Information System Security Manager (ISSM) and onsite Information System Security Engineers (ISSEs) to align tasking, testing methods, system configurations, hardware and software inventories, and system-performance analyses.
- Analyze information technology and operational technology (IT/OT) cyber risk and recommend security controls and countermeasures that improve the confidentiality, integrity, availability, authenticity, non-repudiation, and resiliency of FRCS data and systems.
- Conduct vulnerability scans and compliance testing using Assured Compliance Assessment Solution (ACAS), Nessus, and Security Technical Implementation Guide (STIG) checklists; document findings and remediation feedback.
- Support FRCS site-survey planning, findings analysis, and after-action reporting for the EURAFCENT area of responsibility from the Naples, Italy location.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte’s Government and Public Services (GPS) practice – our people, ideas, technology and outcomes—is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks and AI infrastructure from the core to the edge, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances.
Qualifications
Required:
- One of the following: a bachelor’s degree in Information Technology or Cybersecurity; an associate degree in Information Technology or Cybersecurity and 4+ years of cybersecurity experience; or a high school diploma and 8+ years of cybersecurity experience.
- 5+ years of military or civilian experience in one or more of the following: Risk Management Framework support, Security Technical Implementation Guide application, cybersecurity vulnerability scanning, information technology or operational technology cybersecurity support, or security-control assessments.
- Experience obtaining Authority to Operate (ATO) approvals and supporting the Risk Management Framework (RMF) process.
- Experience developing RMF artifacts.
- Experience implementing security controls, patching vulnerabilities, conducting vulnerability scans, and completing STIG checklists.
- You can expect to co-locate on average 5 times a week with variations based on types of work/projects and client locations.
- Ability to work 100% onsite in Naples, Italy.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Experience implementing Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
- Experience conducting Assured Compliance Assessment Solution (ACAS) scans and generating reports.
- Experience with industrial communication protocols.
- Experience supporting utility information systems or energy-management technologies.
For individuals assigned and/or hired to work in Naples, Italy, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Naples, Italy and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $113,000 to $188,400.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Our Deloitte AI & Engineering team to transform technology platforms, drive innovation, and help make a significant impact on our clients’ success. You’ll work alongside talented professionals reimagining and reengineering operations and processes that are critical to businesses. Your contributions can help clients improve financial performance, accelerate new digital ventures, and fuel growth through innovation.
Work you'll do
As a(n) PROJECT - Delivery Management Engineer III on the Government and Public Services Hybrid Cloud Infrastructure team, you will be responsible for...
- Support the Risk Management Framework (RMF) lifecycle for NAVFAC Facility Related Control Systems (FRCS), including system categorization and security-control selection, implementation, and assessment.
- Coordinate with the EURAFCENT Information System Security Manager (ISSM) and onsite Information System Security Engineers (ISSEs) to align tasking, testing methods, system configurations, hardware and software inventories, and system-performance analyses.
- Analyze information technology and operational technology (IT/OT) cyber risk and recommend security controls and countermeasures that improve the confidentiality, integrity, availability, authenticity, non-repudiation, and resiliency of FRCS data and systems.
- Conduct vulnerability scans and compliance testing using Assured Compliance Assessment Solution (ACAS), Nessus, and Security Technical Implementation Guide (STIG) checklists; document findings and remediation feedback.
- Support FRCS site-survey planning, findings analysis, and after-action reporting for the EURAFCENT area of responsibility from the Naples, Italy location.
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
The team
Deloitte’s Government and Public Services (GPS) practice – our people, ideas, technology and outcomes—is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise.
Our Hybrid Cloud Infrastructure offering provides specialized engineering capabilities to design, implement, manage, and operate hybrid cloud environments, modernize networks and AI infrastructure from the core to the edge, and incubate new infrastructure and device services to help clients stay ahead with the latest technology advances.
Qualifications
Required:
- One of the following: a bachelor’s degree in Information Technology or Cybersecurity; an associate degree in Information Technology or Cybersecurity and 4+ years of cybersecurity experience; or a high school diploma and 8+ years of cybersecurity experience.
- 5+ years of military or civilian experience in one or more of the following: Risk Management Framework support, Security Technical Implementation Guide application, cybersecurity vulnerability scanning, information technology or operational technology cybersecurity support, or security-control assessments.
- Experience obtaining Authority to Operate (ATO) approvals and supporting the Risk Management Framework (RMF) process.
- Experience developing RMF artifacts.
- Experience implementing security controls, patching vulnerabilities, conducting vulnerability scans, and completing STIG checklists.
- You can expect to co-locate on average 5 times a week with variations based on types of work/projects and client locations.
- Ability to work 100% onsite in Naples, Italy.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred:
- Experience implementing Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
- Experience conducting Assured Compliance Assessment Solution (ACAS) scans and generating reports.
- Experience with industrial communication protocols.
- Experience supporting utility information systems or energy-management technologies.
For individuals assigned and/or hired to work in Naples, Italy, Deloitte is required by law to include a reasonable estimate of the compensation range for this role. This compensation range is specific to Naples, Italy and takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $113,000 to $188,400.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.