Cybersecurity Engineer

Zachary Piper, LLC; San Diego (CA); Presencial; USD 170.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical

Dental

Vision

401(k)

Paid Time Off

Sick Leave

Descripción de la vacante

Zachary Piper Solutions is seeking a Cybersecurity Engineer III for the NIWC PAC IT Management contract in San Diego, CA. This fully onsite role focuses on A&A, RMF compliance, and accreditation activities across DoD systems.

You will lead RMF/A&A efforts, develop and maintain SSPs/SAPs/SARs, manage eMASS tasking, and coordinate with ISSOs and stakeholders to ensure security readiness and regulatory compliance. Requires 10+ years in cybersecurity and active Secret clearance.

Formación

• 10+ years of cybersecurity experience across information assurance, incident response, or related security disciplines.
• Strong RMF, DoD cybersecurity compliance, and A&A experience.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&M management, vulnerability assessment, and risk analysis.
• Strong understanding of monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Responsabilidades

• Lead and support RMF A&A efforts per RMF requirements.
• Test and implement security controls based on system categorization and overlays.
• Conduct active and passive reconnaissance to identify risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms).
• Create and maintain SSPs, SAPs, SARs, and other accreditation docs.
• Manage eMASS tasking and IV/V, STIG reviews, ASRs, POA&M updates, and package submissions.
• Maintain DISA circuit connections, system inheritances, and cloud accreditation dependencies.
• Perform monitoring and incident triage to evaluate incident scope and impact.
• Collaborate with system owners, ISSOs, and government stakeholders to maintain compliance.

Educación

CAP, CASP+, CISM, CISSP (Associate), GSLC

Herramientas

eMASS

DISA CCSDs

Descripción del empleo

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract based in San Diego, CA. This position is a full-time role and will be 100% onsite. This position is critical in safeguarding mission systems and maintaining cybersecurity compliance across accredited environments. As a Cybersecurity Engineer III, you will play a pivotal role in Assessment & Authorization (A&A), Risk Management Framework (RMF) compliance, cybersecurity monitoring, incident response, vulnerability management, and accreditation activities supporting critical Department of Defense systems.

Key Responsibilities:

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements, including privacy, classified, intelligence, AI, and NOFORN environments.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies, milestone tracking, and control mapping.
• Create and maintain comprehensive cybersecurity documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Other accreditation-related documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Requirements:

• 10+ years of experience in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong experience supporting RMF, DoD cybersecurity compliance, and A&A activities.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&M management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Education & Certifications:

Required Certification (IAM Level II): One of the following:

• CAP
• CASP+
• CISM
• CISSP (Associate accepted)
• GSLC

Preferred:

• CISSP Certification

Clearance Requirement:

• Active Secret Clearance required

Compensation:

Salary Range:$170,000 - $180,000depending on experience

Full Benefits Include:

• Medical
• Dental
• Vision
• 401(k)
• Paid Time Off
• Sick Leave if Required by Law

This job opens for applications on 11/4/2026. Applications for this job will be accepted for at least 30 days from the posting date.