Cybersecurity Engineer III

Cybersecurity Engineer III

Location: San Diego, CA (100% onsite) Clearance Requirements: Active Secret Position Status: 6 month contract to permanent Conversion Salary: $140-150K

Our client is looking for a Cybersecurity Engineer III for an onsite position in San Diego, CA. They are a government IT and cybersecurity contractor providing technology services to the U.S. Department of Defense and other federal agencies. They specialize in cybersecurity, network and systems engineering, IT infrastructure, software development, and technical support for mission-critical government programs.

Responsibilities:

You will support an Information Technology Management Support Services contract. Contribute to the Assessment and Authorization (A&A) accreditation efforts. This role maintains cybersecurity monitoring operations, performs triage to assess the scope and impact of incidents, identifies vulnerabilities, and recommends remediation strategies. The role requires in-depth knowledge of the Risk Management Framework.

• Test and apply security controls based on security categorization, the application of overlays (privacy, classified, intel, etc.) and security control tailoring (AI, NOFORN, etc.).
• Conduct active and passive reconnaissance of data, with the ability to assess and author Plans of Milestones and Actions (POA&Ms) containing accurate and verifiable mitigation statements, milestone tracking, and applying to the most relevant security control.
• Development of comprehensive required A&A documentation, including System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Reports (SARs), etc.
• Adherence to the eMASS scheduled tasking within the accreditation cycle, including Quarterly Independent Verification and Validation (IV&V), quarterly STIG checks, Annual Security Review (ASR), monthly POA&M updates, and resubmission for ATO, ATC, IATC and IATT as applicable.
• Maintenance of DISA circuit connections (CCSDs), inheritance from accredited systems and cloud service providers, and the workflow schedule on accreditations.

Required Skills/Education:

- 10+ years of experience in cybersecurity or incident response - Required Certification: IAM II (one of the following) CASP+, CAP, CISM, GSLC, CISSP (or Associate) - Cybersecurity Monitoring and Incident Response - Security Testing, Auditing, and Remediation - Data Analytics and Risk Assessment - Proficiency with IT Security Software and Web Security Tools

Preferred Skills: - Certified Information Systems Security Professional (CISSP)

About Seneca Resources At Seneca Resources, we are more than just a staffing and consulting firm, we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact.