Cybersecurity Engineer III

Piper Companies; San Diego (CA); On-site; USD 130,000 - 185,000; Full time

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support RMF/A&A activities and continuous monitoring for DoD environments. This on-site role in San Diego requires strong governance and risk management practices to protect critical defense systems.

Responsibilities include developing SSPs/SAPs/SARs/POA&Ms, conducting vulnerability assessments, and managing eMASS tasks, STIGs, and ASRs. A Secret clearance and IAT Level III certification are required.

Qualifications

• 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required, including CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH.

Responsibilities

• Support RMF activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation, including SSPs, SAPs, SARs, and POA&Ms.
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking.
• Manage eMASS tasking, quarterly IV&V reviews, STIG assessments, ASRs, and POA&M updates.
• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Skills

RMF

eMASS

DISA STIGs

POA&M management

Vulnerability tools

Security control validation

Cybersecurity monitoring

Incident response

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support a company focused on delivering mission-critical information technology and cybersecurity services for Department of Defense environments. This position is on-site in San Diego, CA. The Cybersecurity Engineer III will support Assessment & Authorization (A&A) activities, cybersecurity compliance efforts, and continuous monitoring initiatives across accredited systems. This is an opportunity to play a key role in protecting critical defense systems and ensuring mission readiness through strong cybersecurity governance and risk management practices.

Responsibilities for the Cybersecurity Engineer III include:

• Support Risk Management Framework (RMF) activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms.
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking activities.
• Manage eMASS tasking, including Quarterly IV&V reviews, STIG assessments, Annual Security Reviews (ASRs), and POA&M updates.
• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Required Qualifications for the Cybersecurity Engineer III include:

• 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required, including one of the following:
  • CASP+
  • CCNP Security
  • CISA
  • CISSP (or Associate)
  • GCED
  • GCIH

Compensation for the Cybersecurity Engineer III include:

Salary Range: Depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law

#LI-JB1

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, eMASS, A&A, Assessment and Authorization, Information Assurance, Vulnerability Management, Incident Response, POA&M, SSP, SAP, SAR, DISA STIG, Continuous Monitoring, Security Compliance, IAT Level III, CISSP, CASP+, CISA, GCIH, GCED, Secret Clearance, DoD Cybersecurity, Security Controls, Accreditation, Cyber Defense, eMASS Administration, Information Security, DoD IT Security.