Cybersecurity Engineer III

Zachary Piper Solutions; San Diego (CA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Full benefits package

Tuition reimbursement

Paid time off

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support RMF activities and A&A efforts for DoD environments. The role is on-site in San Diego, CA, focusing on risk management, vulnerability assessment, and continuous monitoring across accredited systems.

The candidate will develop SSPs, SAPs, SARs, and POA&Ms, manage eMASS tasks, STIG reviews, and annual security reviews, ensuring proper accreditation and documentation.

Qualifications

• 10+ years in cybersecurity, IA, incident response, or RMF environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability tools, and security documentation development.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation.
• Bachelor’s degree in Cybersecurity, IT, CS, or related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH) preferred.

Responsibilities

• Support RMF activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation (SSPs, SAPs, SARs, POA&Ms).
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking.
• Manage eMASS tasking (IV&V reviews, STIG assessments, ASRs, POA&Ms).
• Maintain accreditation workflows, inheritance documentation, DISA circuit requirements, and authorization package submissions.

Skills

RMF

eMASS

STIGs

POA&M

Vulnerability tools

CISSP

Secret clearance

IAT III

CASP+

CISA

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

DISA STIGs

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support a company focused on delivering mission-critical information technology and cybersecurity services for Department of Defense environments. This position is on-site in San Diego, CA. The Cybersecurity Engineer III will support Assessment & Authorization (A&A) activities, cybersecurity compliance efforts, and continuous monitoring initiatives across accredited systems. This is an opportunity to play a key role in protecting critical defense systems and ensuring mission readiness through strong cybersecurity governance and risk management practices.

Responsibilities for the Cybersecurity Engineer III include:

• Support Risk Management Framework (RMF) activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms.
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking activities.
• Manage eMASS tasking, including Quarterly IV&V reviews, STIG assessments, Annual Security Reviews (ASRs), and POA&M updates.
• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Required Qualifications for the Cybersecurity Engineer III include:

• 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required, including one of the following:
  • CASP+
  • CCNP Security
  • CISA
  • CISSP (or Associate)
  • GCED
  • GCIH

Compensation for the Cybersecurity Engineer III include:

Salary Range: Depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law

#LI-JB1

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, eMASS, A&A, Assessment and Authorization, Information Assurance, Vulnerability Management, Incident Response, POA&M, SSP, SAP, SAR, DISA STIG, Continuous Monitoring, Security Compliance, IAT Level III, CISSP, CASP+, CISA, GCIH, GCED, Secret Clearance, DoD Cybersecurity, Security Controls, Accreditation, Cyber Defense, eMASS Administration, Information Security, DoD IT Security.