Cybersecurity Engineer

Piper Companies; San Diego (CA); Presencial; USD 170.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical

Dental

Vision

401(k)

Paid Time Off

Sick Leave

Descripción de la vacante

Zachary Piper Solutions seeks a Cybersecurity Engineer III to support NIWC PAC IT Management Services in San Diego, CA. This full-time, onsite role protects DoD mission systems through RMF A&A, security controls, and continuous monitoring.

You will develop SSPs/SAPs/SARs, manage eMASS tasks, IV&V, STIG reviews, and POA&Ms, coordinate with ISSOs and stakeholders, and ensure accreditation readiness across accredited environments.

Formación

• 10+ years of cybersecurity experience including RMF, A&A, and DoD compliance.
• Experience developing accreditation documentation within eMASS and performing audits.
• Strong expertise in security monitoring, vulnerability assessment, and remediation processes.

Responsabilidades

• Lead A&A efforts in accordance with RMF requirements.
• Test and implement security controls for varying environments (privacy, classified, AI, NOFORN).
• Develop and maintain POA&Ms with mitigation strategies and milestones.
• Create SSPs, SAPs, SARs, and other accreditation docs.
• Manage eMASS tasking including IV&V, STIG reviews, and ASRs.
• Coordinate with system owners, ISSOs, and stakeholders for accreditation readiness.

Conocimientos

RMF

A&A

eMASS

POA&M mgmt

Vulnerability mgmt

Incident response

Documentation

DISA STIGs

Educación

IAM Level II Certification

CISSP (Preferred)

Descripción del empleo

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract based in San Diego, CA. This position is a full-time role and will be 100% onsite. This position is critical in safeguarding mission systems and maintaining cybersecurity compliance across accredited environments. As a Cybersecurity Engineer III, you will play a pivotal role in Assessment & Authorization (A&A), Risk Management Framework (RMF) compliance, cybersecurity monitoring, incident response, vulnerability management, and accreditation activities supporting critical Department of Defense systems.

Key Responsibilities:

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements, including privacy, classified, intelligence, AI, and NOFORN environments.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies, milestone tracking, and control mapping.
• Create and maintain comprehensive cybersecurity documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Other accreditation-related documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Requirements:

• 10+ years of experience in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong experience supporting RMF, DoD cybersecurity compliance, and A&A activities.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&M management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Education & Certifications:

Required Certification (IAM Level II): One of the following:

• CAP
• CASP+
• CISM
• CISSP (Associate accepted)
• GSLC

Preferred:

• CISSP Certification

Clearance Requirement:

• Active Secret Clearance required

Compensation:

Salary Range:$170,000 - $180,000depending on experience

Full Benefits Include:

• Medical
• Dental
• Vision
• 401(k)
• Paid Time Off
• Sick Leave if Required by Law

This job opens for applications on 11/4/2026. Applications for this job will be accepted for at least 30 days from the posting date.