Cybersecurity Engineer III

Zachary Piper Solutions; San Diego (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

PTO

Paid holidays

Medical insurance

Dental insurance

Vision insurance

401K

Tuition reimbursement

Sick leave

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III in San Diego to support RMF activities, develop A&A documentation, and lead vulnerability management efforts for DoD programs.

You will handle eMASS tasking, STIG assessments, and accreditation package submissions while maintaining security controls, monitoring, and incident response. A Secret clearance and IAT Level III certification are required.

Qualifications

• 10+ years in cybersecurity or RMF environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management.
• Strong knowledge of monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
• Bachelor’s degree in a related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III Certification required, including CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH.

Responsibilities

• Support RMF activities including security control implementation, testing, and validation.
• Develop and maintain A&A documentation (SSPs, SAPs, SARs, and POA&Ms).
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking.
• Manage eMASS tasking, IV&V reviews, STIG assessments, ASRs, and POA&M updates.
• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Skills

RMF compliance

eMASS

STIGs

POA&M management

Vulnerability assessment

Security documentation

Incident response

DoD frameworks

Education

Bachelor's degree preferred

Tools

eMASS

Job description

Responsibilities for the Cybersecurity Engineer III include:

• Support Risk Management Framework (RMF) activities, including security control implementation, testing, and validation.


• Develop and maintain A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms.


• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking activities.


• Manage eMASS tasking, including Quarterly IV&V reviews, STIG assessments, Annual Security Reviews (ASRs), and POA&M updates.


• Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.

Required Qualifications for the Cybersecurity Engineer III include:

• 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.


• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.


• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.


• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.


• Active Secret Clearance required.


• DoD 8570/8140 IAT Level III Certification required, including one of the following:
  
  
  
  • CASP+
  
  
  • CCNP Security
  
  
  • CISA
  
  
  • CISSP (or Associate)
  
  
  • GCED
  
  
  • GCIH
  
  
  
  

Compensation for the Cybersecurity Engineer III include:

Salary Range: Depending on experience

Full Benefits Package: PTO, Paid Holidays, Medical, Dental, Vision, 401K, Tuition Reimbursement, Sick Leave as required by law

#LI-JB1

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, eMASS, A&A, Assessment and Authorization, Information Assurance, Vulnerability Management, Incident Response, POA&M, SSP, SAP, SAR, DISA STIG, Continuous Monitoring, Security Compliance, IAT Level III, CISSP, CASP+, CISA, GCIH, GCED, Secret Clearance, DoD Cybersecurity, Security Controls, Accreditation, Cyber Defense, eMASS Administration, Information Security, DoD IT Security.