Cybersecurity Engineer

Zachary Piper, LLC; San Diego (CA); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paid Time Off

Sick Leave

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support the NIWC PAC IT Management Support Services contract in San Diego, CA. This full-time, 100% onsite role focuses on A&A, RMF compliance, monitoring, incident response, and accreditation for DoD systems.

The candidate will develop SSPs, SAPs, SARs, POA&Ms, and maintain eMASS tasking, IV&V, STIG reviews, and annual security activities while collaborating with ISSOs and stakeholders to ensure readiness.

Qualifications

• 10+ years in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong RMF, DoD cybersecurity compliance, and A&A experience.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&Ms management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Responsibilities

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies and milestone tracking.
• Create and maintain comprehensive cybersecurity documentation including: SSPs, SAPs, SARs, and other accreditation-related documentation.
• Manage eMASS tasking throughout the accreditation lifecycle, including: IV&V, STIG reviews, ASRs, POA&Ms updates, and package submissions.
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Skills

RMF experience

A&A

eMASS

Vulnerability analysis

Incident response

Cybersecurity monitoring

POA&Ms management

STIG compliance

Security documentation

DoD cybersecurity

Education

IAM Level II certification

CAP

CASP+

CISM

CISSP (Associate)

GSLC

CISSP Certification

Tools

Security testing tools

IT security platforms

Web security technologies

Job description

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract based in San Diego, CA. This position is a full‑time role and will be 100% onsite. This position is critical in safeguarding mission systems and maintaining cybersecurity compliance across accredited environments. As a Cybersecurity Engineer III, you will play a pivotal role in Assessment & Authorization (A&A), Risk Management Framework (RMF) compliance, cybersecurity monitoring, incident response, vulnerability management, and accreditation activities supporting critical Department of Defense systems.

Key Responsibilities:

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements, including privacy, classified, intelligence, AI, and NOFORN environments.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies, milestone tracking, and control mapping.
• Create and maintain comprehensive cybersecurity documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Other accreditation-related documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&Ms updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Requirements:

• 10+ years of experience in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong experience supporting RMF, DoD cybersecurity compliance, and A&A activities.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&Ms management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Education & Certifications:

Required Certification (IAM Level II): One of the following:

• CAP
• CASP+
• CISM
• CISSP (Associate accepted)
• GSLC

Preferred:

• CISSP Certification

Clearance Requirement:

• Active Secret Clearance required

Compensation:

Salary Range: $170,000 - $180,000 depending on experience

Full Benefits Include:

• Medical
• Dental
• Vision
• 401(k)
• Paid Time Off
• Sick Leave if Required by Law

This job opens for applications on 11/13/2026. Applications for this job will be accepted for at least 30 days from the posting date.

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment & Authorization, A&A, eMASS, SSP, SAP, SAR, POA&Ms, STIG, IV&V, Annual Security Review, ATO, ATC, IATC, IATT, Information Assurance, Information System Security Officer, ISSO, Vulnerability Management, Incident Response, Security Compliance, NIST 800-53, DoD Cybersecurity, Security Controls, Accreditation, Security Auditing, Security Assessment, DISA, CCSD, Risk Assessment, Cyber Monitoring, Security Operations, Threat Analysis, Security Documentation, Vulnerability Assessment, Security Remediation.