Cybersecurity Engineer - 177360

Zachary Piper, LLC; San Diego (CA); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

PTO

Sick Leave

Job summary

Zachary Piper Solutions in San Diego is seeking a Cybersecurity Engineer III to support a DoD customer. This full-time, onsite role focuses on RMF implementation, A&A activities, and security monitoring within a mission-critical environment.

You will develop and maintain RMF documents (SSP, SAP, SAR), manage eMASS tasks, IV&V, STIG reviews, and coordination with system owners to ensure accreditation readiness.

Qualifications

• 10+ years in cybersecurity, information assurance, or incident response.
• Strong RMF knowledge and DoD security compliance.
• Experience authoring RMF accreditation documents (SSP,SAR,SAP).
• Familiarity with DISA STIGs and vulnerability management.
• Experience with accreditation activities in DoD environments.

Responsibilities

• Support A&A accreditation efforts per RMF requirements.
• Test security controls and tailor based on overlays.
• Develop and maintain POA&Ms with mitigation strategies.
• Create SSPs, SAPs, SARs and related RMF docs.
• Manage eMASS tasks and IV&V, STIG reviews, ASRs, and ATO packages.
• Coordinate with stakeholders to ensure compliance and readiness.

Skills

RMF implementation

A&A

Vulnerability management

Accreditation documentation

Risk assessment

Security monitoring

Incident response

Tools

eMASS

Job description

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer to support a Department of Defense (DoD) customer based in San Diego, CA. This position is a full-time role that will be 100% onsite. This position is critical in safeguarding enterprise systems and ensuring compliance with cybersecurity requirements throughout the Assessment and Authorization (A&A) lifecycle. As a Cybersecurity Engineer III, you will play a pivotal role in Risk Management Framework (RMF) implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.

Key Responsibilities:

• Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
• Conduct active and passive reconnaissance activities and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
• Create and maintain accreditation documentation, including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Related RMF documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG Reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
• Support cybersecurity monitoring and incident response activities.
• Assess incidents to determine scope, impact, and required corrective actions.
• Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.
• Work closely with mission owners and cybersecurity personnel to ensure systems remain compliant and accreditation-ready.

Requirements:

Required Clearance:

• Active Secret Clearance

Required Certification (IAT Level III): Must possess one of the following:

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Qualifications:

• 10+ years of cybersecurity, information assurance, or incident response experience
• Strong understanding of the Risk Management Framework (RMF)
• Experience with eMASS and DoD cybersecurity compliance requirements
• Experience authoring RMF accreditation documentation
• Knowledge of DISA STIGs, vulnerability management, and security auditing
• Experience supporting accreditation and authorization activities within DoD environments

Preferred Qualifications:

• CISSP Certification
• Prior experience supporting NIWC Pacific or similar DoD organizations

Compensation:

Salary Range: $170,000 - $180,000 depending on experience

Full Benefits Include:

• Medical Insurance
• Dental Insurance
• Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 10/27/2026. Applications for this position will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment and Authorization, A&A, eMASS, SSP, SAR, SAP, POA&M, DISA STIG, Security Compliance, Information Assurance, Vulnerability Management, Incident Response, Security Monitoring, DoD Cybersecurity, Accreditation, Authorization to Operate, ATO, Security Controls, Cyber Risk Assessment, Information Security, CISSP, CASP+, CISA, GCIH, GCED, CCNP Security, Security Engineering, NIWC PAC, DoD, Secret Clearance, Cyber Defense, Security Auditing, Compliance Management, Enterprise Security, Information Systems Security, San Diego,