Onsite DoD Cybersecurity Engineer — RMF & A&A Lead

Piper Companies; San Diego (CA); On-site; USD 170,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k)

Paid Time Off (PTO)

Sick Leave (where required by law)

Job summary

Zachary Piper Solutions in San Diego, CA seeks a Cybersecurity Engineer III for a DoD client. This full-time, 100% onsite role focuses on RMF implementation, A&A lifecycle, and cybersecurity monitoring in a mission-critical environment.

You will handle eMASS tasking, vulnerability management, accreditation artifacts (SSP, SAP, SAR), and coordination with system owners to maintain compliance and readiness.

Qualifications

• 10+ years of cybersecurity, information assurance, or incident response experience.
• Strong RMF knowledge and DoD security requirements.
• Experience with eMASS and DoD compliance processes.
• Ability to author RMF accreditation documents (SSP, SAP, SAR).
• Knowledge of DISA STIGs and vulnerability management.
• Experience supporting accreditation activities within DoD environments.

Responsibilities

• Support A&A accreditation efforts per RMF requirements.
• Test and apply security controls and tailoring for overlays and classifications.
• Conduct active and passive risk reconnaissance and assess cybersecurity risks.
• Develop and maintain POA&Ms with mitigation strategies.
• Create and maintain SSPs, SAPs, SARs and related RMF documentation.
• Manage eMASS tasking across the accreditation lifecycle.
• Coordinate IV&V, STIG reviews, ASRs, and POA&M updates.
• Maintain DISA circuit connections and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation.
• Collaborate with stakeholders to maintain compliance readiness.

Skills

Active Secret Clearance

RMF expertise

DoD cybersecurity

eMASS experience

Vulnerability assessment

Incident response

Tools

eMASS

RMF documentation tooling

Job description

Zachary Piper Solutions in San Diego, CA seeks a Cybersecurity Engineer III for a DoD client. This full-time, 100% onsite role focuses on RMF implementation, A&A lifecycle, and cybersecurity monitoring in a mission-critical environment.

You will handle eMASS tasking, vulnerability management, accreditation artifacts (SSP, SAP, SAR), and coordination with system owners to maintain compliance and readiness.