Cybersecurity Engineer III — DoD RMF/A&A (On-Site SD)

Zachary Piper Solutions; San Diego (CA); On-site; USD 110,000 - 165,000; Full time

Benefits offered by this job

Full benefits package

Tuition reimbursement

Paid time off

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support RMF activities and A&A efforts for DoD environments. The role is on-site in San Diego, CA, focusing on risk management, vulnerability assessment, and continuous monitoring across accredited systems.

The candidate will develop SSPs, SAPs, SARs, and POA&Ms, manage eMASS tasks, STIG reviews, and annual security reviews, ensuring proper accreditation and documentation.

Qualifications

• 10+ years in cybersecurity, IA, incident response, or RMF environments.
• Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability tools, and security documentation development.
• Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation.
• Bachelor’s degree in Cybersecurity, IT, CS, or related field preferred.
• Active Secret Clearance required.
• DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH) preferred.

Responsibilities

• Support RMF activities, including security control implementation, testing, and validation.
• Develop and maintain A&A documentation (SSPs, SAPs, SARs, POA&Ms).
• Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking.
• Manage eMASS tasking (IV&V reviews, STIG assessments, ASRs, POA&Ms).
• Maintain accreditation workflows, inheritance documentation, DISA circuit requirements, and authorization package submissions.

Skills

RMF

eMASS

STIGs

POA&M

Vulnerability tools

CISSP

Secret clearance

IAT III

CASP+

CISA

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

DISA STIGs

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support RMF activities and A&A efforts for DoD environments. The role is on-site in San Diego, CA, focusing on risk management, vulnerability assessment, and continuous monitoring across accredited systems.

The candidate will develop SSPs, SAPs, SARs, and POA&Ms, manage eMASS tasks, STIG reviews, and annual security reviews, ensuring proper accreditation and documentation.