Cybersecurity Engineer - 173489

Zachary Piper Solutions; San Diego, Northern (CA, KY); On-site; USD 145,000 - 150,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Time Off (PTO)

Sick Leave

Job summary

Zachary Piper Solutions seeks a Cybersecurity Engineer III to support a DoD customer in San Diego, CA. This full-time, 100% onsite role focuses on RMF implementation, cybersecurity monitoring, vulnerability management, and accreditation activities in a mission-critical environment.

You will develop and maintain RMF documentation, manage eMASS tasking, and ensure compliance across the A&A lifecycle with steady collaboration with mission owners and security teams.

Qualifications

• 10+ years of cybersecurity, information assurance, or incident response experience.
• Strong understanding of the RMF process and its application to DoD systems.
• Experience with eMASS and DoD cybersecurity compliance requirements.
• Experience authoring RMF accreditation documentation.
• Knowledge of DISA STIGs, vulnerability management, and security auditing.
• Experience supporting accreditation and authorization activities within DoD environments.

Responsibilities

• Support A&A accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on categorization and tailoring.
• Conduct active and passive reconnaissance and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones with mitigation strategies.
• Create and maintain accreditation documentation (SSPs, SAPs, SARs).
• Manage eMASS tasking and RMF lifecycle activities (IV&V, STIG reviews, ASRs).
• Monitor security posture, perform vulnerability assessments, and advise remediation actions.
• Collaborate with stakeholders and system owners to maintain compliance.

Skills

RMF expertise

Accreditation support

Vulnerability management

Incident response

Security monitoring

DoD standards

Tools

eMASS

Job description

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer to support a Department of Defense (DoD) customer based in San Diego, CA. This position is a full-time role that will be 100% onsite. This position is critical in safeguarding enterprise systems and ensuring compliance with cybersecurity requirements throughout the Assessment and Authorization (A&A) lifecycle. As a Cybersecurity Engineer III, you will play a pivotal role in Risk Management Framework (RMF) implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.

Key Responsibilities:

• Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
• Conduct active and passive reconnaissance activities and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
• Create and maintain accreditation documentation, including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Related RMF documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG Reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
• Support cybersecurity monitoring and incident response activities.
• Assess incidents to determine scope, impact, and required corrective actions.
• Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.
• Work closely with mission owners and cybersecurity personnel to ensure systems remain compliant and accreditation-ready.

Requirements:

Required Clearance:

• Active Secret Clearance

Required Certification (IAT Level III): Must possess one of the following:

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Qualifications:

• 10+ years of cybersecurity, information assurance, or incident response experience
• Strong understanding of the Risk Management Framework (RMF)
• Experience with eMASS and DoD cybersecurity compliance requirements
• Experience authoring RMF accreditation documentation
• Knowledge of DISA STIGs, vulnerability management, and security auditing
• Experience supporting accreditation and authorization activities within DoD environments

Preferred Qualifications:

• CISSP Certification
• Prior experience supporting NIWC Pacific or similar DoD organizations

Compensation:

Salary Range: $145,000 - $150,000 depending on experience

Full Benefits Include:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 10/7/2026. Applications for this position will be accepted for at least 30 days from the posting date.

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment and Authorization, A&A, eMASS, SSP, SAR, POA&M, DISA STIG, Security Compliance, Information Assurance, Vulnerability Management, Incident Response, Security Monitoring, DoD Cybersecurity, Accreditation, Authorization to Operate, ATO, Security Controls, Cyber Risk Assessment, Information Security, CISSP, CASP+, CISA, GCIH, GCED, CCNP Security, Security Engineering, NIWC PAC, DoD, Secret Clearance, Cyber Defense, Security Auditing, Compliance Management, Enterprise Security, Information Systems Security, San Diego,