Cyber Security Engineer III

Piper Companies; San Diego (CA); On-site; USD 140,000 - 155,000; Full time

Benefits offered by this job

PTO

Paid Holidays

Medical

Dental

Vision

401K

Tuition Reimbursement

Sick Leave

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support RMF/A&A activities and cybersecurity compliance for DoD environments. This on-site role in San Diego, CA focuses on risk management, security documentation, and continuous monitoring across accredited systems.

Qualifications include 10+ years in cybersecurity/RMF, active Secret clearance, and IAT Level III certification (CASP+/CCNP Security/CISA/CISSP/GCED/GCIH). Salary range and full benefits offered.

Qualifications

• Ten or more years of experience in cybersecurity or RMF environments.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required with one of CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH.

Responsibilities

• Support RMF activities including security control implementation, testing, and validation.
• Develop and maintain A&A documentation (SSPs, SAPs, SARs, POA&Ms).
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking.
• Manage eMASS tasking, quarterly IV&V reviews, STIG assessments, ASRs, and POA&Ms.
• Maintain accreditation workflows, inheritance documentation, DISA circuit requirements, and authorization package submissions.

Skills

RMF compliance

Risk assessment

Cybersecurity monitoring

Auditing

Documentation development

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

DISA STIGs

POA&M management

Vulnerability assessment tools

Security control validation

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support a company focused on delivering mission-critical information technology and cybersecurity services for Department of Defense environments. This position is on-site in San Diego, CA. The Cybersecurity Engineer III will support Assessment & Authorization (A&A) activities, cybersecurity compliance efforts, and continuous monitoring initiatives across accredited systems. This is an opportunity to play a key role in protecting critical defense systems and ensuring mission readiness through strong cybersecurity governance and risk management practices.

Responsibilities for the Cybersecurity Engineer III include:

• Support Risk Management Framework (RMF) activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms.
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking activities.
• Manage eMASS tasking, including Quarterly IV&V reviews, STIG assessments, Annual Security Reviews (ASRs), and POA&M updates.
• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Required Qualifications for the Cybersecurity Engineer III include:

• 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required, including one of the following:
  • CASP+
  • CCNP Security
  • CISA
  • CISSP (or Associate)
  • GCED
  • GCIH

Compensation for the Cybersecurity Engineer III include:

Salary Range:

$140,000-$155,000 depending on experience

Full Benefits Package:

PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law

#LI-JB1

Keywords:

Cybersecurity Engineer, RMF, Risk Management Framework, eMASS, A&A, Assessment and Authorization, Information Assurance, Vulnerability Management, Incident Response, POA&M, SSP, SAP, SAR, DISA STIG, Continuous Monitoring, Security Compliance, IAT Level III, CISSP, CASP+, CISA, GCIH, GCED, Secret Clearance, DoD Cybersecurity, Security Controls, Accreditation, Cyber Defense, eMASS Administration, Information Security, DoD IT Security.