Cybersecurity Engineer

Zachary Piper Solutions; San Diego (CA); On-site; USD 140,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k)

PTO

Sick Leave

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer to support a DoD customer in San Diego, CA. This full-time, 100% onsite role focuses on RMF implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.

The ideal candidate has 10+ years in cybersecurity, RMF expertise, and DoD compliance experience, with active Secret clearance and IAT III certification options. Salary ranges from $140k–$150k with full benefits.

Qualifications

• Active Secret Clearance required.
• IAT Level III certification (one of: CASP+, CCNP Security, CISA, CISSP/Associate, GCED, GCIH).
• 10+ years of cybersecurity, information assurance, or incident response experience.
• Strong RMF knowledge and DoD cybersecurity compliance experience.
• Experience authoring RMF accreditation documentation (SSP/SAR/SAP).
• Knowledge of DISA STIGs, vulnerability management, and security auditing.

Responsibilities

• Support RMF-based A&A accreditation efforts.
• Test and tailor security controls per categorization and overlays.
• Conduct active and passive cyber risk assessments.
• Develop and track POA&Ms with mitigation actions.
• Create and maintain SSPs, SAPs, SARs and RMF documentation.
• Manage eMASS tasks across the accreditation lifecycle and IV&V reviews.
• Maintain DISA circuit connections and accreditation workflows.
• Monitor posture, run vulnerability assessments, and recommend remediations.
• Support cybersecurity monitoring and incident response activities.

Skills

Active Secret Clearance

RMF knowledge

eMASS experience

Vulnerability management

Incident response

DoD compliance

Tools

eMASS

DISA STIGs

POA&M

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer to support a Department of Defense customer in San Diego, CA. This position is a full-time role and will be 100% onsite. This position is critical in safeguarding enterprise systems and ensuring compliance with cybersecurity requirements throughout the Assessment and Authorization (A&A) lifecycle. As a Cybersecurity Engineer III, you will play a pivotal role in Risk Management Framework (RMF) implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.

Key Responsibilities:

• Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
• Conduct active and passive reconnaissance activities and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
• Create and maintain accreditation documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Related RMF documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
• Support cybersecurity monitoring and incident response activities.
• Assess incidents to determine scope, impact, and required corrective actions.
• Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.

Requirements:

Required Clearance:

• Active Secret Clearance

Required IAT Level III Certification (one of the following):

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Qualifications:

• 10+ years of cybersecurity, information assurance, or incident response experience
• Strong understanding of the Risk Management Framework (RMF)
• Experience with eMASS and DoD cybersecurity compliance requirements
• Experience authoring RMF accreditation documentation
• Knowledge of DISA STIGs, vulnerability management, and security auditing
• CISSP certification preferred

Compensation:

Salary Range: $140,000 - $150,000 depending on experience

Full Benefits Include:

• Medical, Dental, and Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 8/18/2026. Applications for this position will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment and Authorization, A&A, eMASS, SSP, SAR, SAP, POA&M, DISA STIG, Security Compliance, Information Assurance, Vulnerability Management, Incident Response, Security Monitoring, DoD Cybersecurity, Accreditation, Authorization to Operate, ATO, Security Controls, Cyber Risk Assessment, Information Security, CISSP, CASP+, CISA, GCIH, GCED, CCNP Security, Security Engineering, NIWC PAC, DoD, Secret Clearance, Cyber Defense, Security Auditing, Compliance Management, Enterprise Security, Information Systems Security