Cybersecurity Engineer - 177360

Piper Companies; San Diego (CA); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Time Off (PTO)

Sick Leave (where required by law)

Job summary

Zachary Piper Solutions in San Diego, CA seeks a Cybersecurity Engineer III for a DoD client. This full-time, 100% onsite role focuses on RMF implementation, A&A lifecycle, and cybersecurity monitoring in a mission-critical environment.

You will handle eMASS tasking, vulnerability management, accreditation artifacts (SSP, SAP, SAR), and coordination with system owners to maintain compliance and readiness.

Qualifications

• 10+ years of cybersecurity, information assurance, or incident response experience.
• Strong RMF knowledge and DoD security requirements.
• Experience with eMASS and DoD compliance processes.
• Ability to author RMF accreditation documents (SSP, SAP, SAR).
• Knowledge of DISA STIGs and vulnerability management.
• Experience supporting accreditation activities within DoD environments.

Responsibilities

• Support A&A accreditation efforts per RMF requirements.
• Test and apply security controls and tailoring for overlays and classifications.
• Conduct active and passive risk reconnaissance and assess cybersecurity risks.
• Develop and maintain POA&Ms with mitigation strategies.
• Create and maintain SSPs, SAPs, SARs and related RMF documentation.
• Manage eMASS tasking across the accreditation lifecycle.
• Coordinate IV&V, STIG reviews, ASRs, and POA&M updates.
• Maintain DISA circuit connections and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation.
• Collaborate with stakeholders to maintain compliance readiness.

Skills

Active Secret Clearance

RMF expertise

DoD cybersecurity

eMASS experience

Vulnerability assessment

Incident response

Tools

eMASS

RMF documentation tooling

Job description

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer to support a Department of Defense (DoD) customer based in San Diego, CA. This position is a full-time role that will be 100% onsite. This position is critical in safeguarding enterprise systems and ensuring compliance with cybersecurity requirements throughout the Assessment and Authorization (A&A) lifecycle. As a Cybersecurity Engineer III, you will play a pivotal role in Risk Management Framework (RMF) implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.

Key Responsibilities:

• Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
• Conduct active and passive reconnaissance activities and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
• Create and maintain accreditation documentation, including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Related RMF documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG Reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
• Support cybersecurity monitoring and incident response activities.
• Assess incidents to determine scope, impact, and required corrective actions.
• Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.
• Work closely with mission owners and cybersecurity personnel to ensure systems remain compliant and accreditation-ready.

Requirements:

Required Clearance:

• Active Secret Clearance

Required Certification (IAT Level III): Must possess one of the following:

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Qualifications:

• 10+ years of cybersecurity, information assurance, or incident response experience
• Strong understanding of the Risk Management Framework (RMF)
• Experience with eMASS and DoD cybersecurity compliance requirements
• Experience authoring RMF accreditation documentation
• Knowledge of DISA STIGs, vulnerability management, and security auditing
• Experience supporting accreditation and authorization activities within DoD environments

Preferred Qualifications:

• CISSP Certification
• Prior experience supporting NIWC Pacific or similar DoD organizations

Compensation:

Salary Range: $170,000 - $180,000 depending on experience

Full Benefits Include:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 10/27/2026. Applications for this position will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment and Authorization, A&A, eMASS, SSP, SAR, SAP, POA&M, DISA STIG, Security Compliance, Information Assurance, Vulnerability Management, Incident Response, Security Monitoring, DoD Cybersecurity, Accreditation, Authorization to Operate, ATO, Security Controls, Cyber Risk Assessment, Information Security, CISSP, CASP+, CISA, GCIH, GCED, CCNP Security, Security Engineering, NIWC PAC, DoD, Secret Clearance, Cyber Defense, Security Auditing, Compliance Management, Enterprise Security, Information Systems Security, San Diego,