Cybersecurity Engineer

Zachary Piper Solutions is seeking a Cybersecurity Engineer to support a Department of Defense customer in San Diego, CA . This position is a full-time role and will be 100% onsite. This position is critical in safeguarding enterprise systems and ensuring compliance with cybersecurity requirements throughout the Assessment and Authorization (A&A) lifecycle. As a Cybersecurity Engineer III, you will play a pivotal role in Risk Management Framework (RMF) implementation, cybersecurity monitoring, vulnerability management, and accreditation activities within a mission-critical environment.


Key Responsibilities:

• Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
• Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
• Conduct active and passive reconnaissance activities and assess cybersecurity risks.
• Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
• Create and maintain accreditation documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Related RMF documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
• Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
• Support cybersecurity monitoring and incident response activities.
• Assess incidents to determine scope, impact, and required corrective actions.
• Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.

Requirements:

Required Clearance:

• Active Secret Clearance

Required IAT Level III Certification (one of the following):

• CASP+
• CCNP Security
• CISA
• CISSP (or Associate)
• GCED
• GCIH

Required Qualifications:

• 10+ years of cybersecurity, information assurance, or incident response experience
• Strong understanding of the Risk Management Framework (RMF)
• Experience with eMASS and DoD cybersecurity compliance requirements
• Experience authoring RMF accreditation documentation
• Knowledge of DISA STIGs, vulnerability management, and security auditing
• CISSP certification preferred

Compensation:

Salary Range: $140,000 - $150,000 depending on experience


Full Benefits Include:

• Medical, Dental, and Vision Insurance
• 401(k)
• Paid Time Off (PTO)
• Sick Leave (where required by law)

This job opens for applications on 8/18/2026. Applications for this position will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment and Authorization, A&A, eMASS, SSP, SAR, SAP, POA&M, DISA STIG, Security Compliance, Information Assurance, Vulnerability Management, Incident Response, Security Monitoring, DoD Cybersecurity, Accreditation, Authorization to Operate, ATO, Security Controls, Cyber Risk Assessment, Information Security, CISSP, CASP+, CISA, GCIH, GCED, CCNP Security, Security Engineering, NIWC PAC, DoD, Secret Clearance, Cyber Defense, Security Auditing, Compliance Management, Enterprise Security, Information Systems Security