Cyber security Engineer III TECHEAD

Techead; San Diego (CA); On-site; USD 140,000 - 145,000; Full time

Job summary

TECHEAD is seeking a Cyber security Engineer III for a Contract-To-Hire role in San Diego, CA. The position focuses on maintaining cybersecurity monitoring operations, RMF-based accreditation, and eMASS workflow administration on-site.

Qualified candidates will have 10+ years in cybersecurity/incident response, active Secret clearance, and DoD IAM Level II certification (CAP/CASP+/CISM/CISSP/GSLC or Associate). Advanced security controls testing and STIG compliance are key aspects.

Qualifications

• This role requires 10+ years in cybersecurity, incident response, or A&A accreditation.
• Active Secret clearance and DoD IAM Level II certification are required.

Responsibilities

• Develop and maintain security artifacts (SSP, SAP, SAR).
• Test and tailor security controls based on RMF and overlays.
• Maintain eMASS workflows and DISA circuit connections.
• Coordinate ATO/ATC resubmissions and IV&Vs on a schedule.

Skills

Cybersecurity

Incident response

RMF

Vulnerability assessment

Education

Active DoD IAM Level II cert (CAP/CASP+/CISM/CISSP/GSLC or Associate)

Active Secret clearance

Tools

eMASS

DISA STIGs

Job description

Always Connecting, Always Evolving.

TECHEAD is seeking qualified applicants for the following Contract-To-Hire position – Cyber security Engineer III / San Diego CA – (JOB-22817). If you are looking for a new opportunity and this position looks to be a fit, please apply to see the TECHEAD difference that has made us successful for 30+ years!

You can find more about our team and values by checking us out at TECHEAD.comor onGlassdoor

Job Details:

Title: Cyber security Engineer III
Location: San Diego, CA
Compensation: $140,000 – $145,000 /per Year
Work Type: Contract-To-Hire
Work Location: On-Site

Job Description:

This role maintains cybersecurity monitoring operations, performs triage to assess incident scope and impact, identifies vulnerabilities, and recommends mitigation strategies. Operating with deep expertise in the Risk Management Framework (RMF), the position exercises technical autonomy to manage eMASS workflows, maintain DISA circuit connections, and author core accreditation artifacts to secure operational Authorization to Operate (ATO).

Key Responsibilities

• Develop comprehensive A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), and Security Assessment Reports (SARs).
• Test and apply security controls based on security categorization, applying relevant overlays (privacy, classified, intel) and security control tailoring.
• Conduct active and passive reconnaissance of data; author and maintain Plans of Action and Milestones (POA&Ms) with accurate mitigation statements and control mapping.
• Execute scheduled eMASS accreditation tasks, including Quarterly IV&Vs, quarterly STIG checks, Annual Security Reviews (ASRs), monthly POA&M updates, and ATO/ATC/IATC/IATT resubmissions.
• Maintain DISA circuit connections (CCSDs), manage inheritance from accredited systems and cloud service providers, and oversee workflow schedules for all accreditations.
• Maintain cybersecurity monitoring operations, assess incident scope/impact, and recommend actionable remediation strategies.

Position Qualifications Education & Experience (Minimum Required)

• 10+ years of progressive cybersecurity, incident response, or A&A accreditation experience. Clearance: Active Secret security clearance.
• Active DoD IAM Level II certification required (one of the following: CAP, CASP+ CE, CISM, CISSP [or Associate], or GSLC).

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP).
• Hands-on capability to triage security incidents, perform vulnerability assessments, and implement remediation strategies.
• Expertise in security control testing, STIG compliance checks, IV&V auditing, and eMASS workflow administration.
• Strong analytical capabilities with IT security software, web security tools, data analytics, and risk management framework applications.

TECHEAD’s mission is to make our on-site associates successful by placing them in the right environment so they can grow and prosper. How we treat and respond to our clients and employees is a reflection of who we are and makes us stand out from the rest. Keeping our business focused on building and maintaining relationships with our employees and clients is the key to our success. We won’t strive for anything less.

TECHEAD provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws governing nondiscrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

For more information on TECHEAD please visit www.techead.com.

No second parties will be accepted.