Onsite Cybersecurity Engineer III - RMF/A&A Expert (DoD)

Zachary Piper, LLC; San Diego (CA); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401(k)

Paid Time Off

Sick Leave

Job summary

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support the NIWC PAC IT Management Support Services contract in San Diego, CA. This full-time, 100% onsite role focuses on A&A, RMF compliance, monitoring, incident response, and accreditation for DoD systems.

The candidate will develop SSPs, SAPs, SARs, POA&Ms, and maintain eMASS tasking, IV&V, STIG reviews, and annual security activities while collaborating with ISSOs and stakeholders to ensure readiness.

Qualifications

• 10+ years in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong RMF, DoD cybersecurity compliance, and A&A experience.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&Ms management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Responsibilities

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies and milestone tracking.
• Create and maintain comprehensive cybersecurity documentation including: SSPs, SAPs, SARs, and other accreditation-related documentation.
• Manage eMASS tasking throughout the accreditation lifecycle, including: IV&V, STIG reviews, ASRs, POA&Ms updates, and package submissions.
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Skills

RMF experience

A&A

eMASS

Vulnerability analysis

Incident response

Cybersecurity monitoring

POA&Ms management

STIG compliance

Security documentation

DoD cybersecurity

Education

IAM Level II certification

CAP

CASP+

CISM

CISSP (Associate)

GSLC

CISSP Certification

Tools

Security testing tools

IT security platforms

Web security technologies

Job description

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support the NIWC PAC IT Management Support Services contract in San Diego, CA. This full-time, 100% onsite role focuses on A&A, RMF compliance, monitoring, incident response, and accreditation for DoD systems.

The candidate will develop SSPs, SAPs, SARs, POA&Ms, and maintain eMASS tasking, IV&V, STIG reviews, and annual security activities while collaborating with ISSOs and stakeholders to ensure readiness.