Cybersecurity Engineer

Zachary Piper Solutions is currently seeking a Cybersecurity Engineer III to support the NIWC PAC Information Technology Management Support Services contract based in San Diego, CA. This position is a full-time role and will be 100% onsite . This position is critical in safeguarding mission systems and maintaining cybersecurity compliance across accredited environments. As a Cybersecurity Engineer III, you will play a pivotal role in Assessment & Authorization (A&A), Risk Management Framework (RMF) compliance, cybersecurity monitoring, incident response, vulnerability management, and accreditation activities supporting critical Department of Defense systems.

Key Responsibilities:

• Lead and support Assessment & Authorization (A&A) efforts in accordance with RMF requirements.
• Test and implement security controls based on system categorization, overlays, and tailored control requirements, including privacy, classified, intelligence, AI, and NOFORN environments.
• Conduct active and passive reconnaissance activities to identify cybersecurity risks and vulnerabilities.
• Develop, assess, and maintain Plans of Action & Milestones (POA&Ms), including mitigation strategies, milestone tracking, and control mapping.
• Create and maintain comprehensive cybersecurity documentation including:
  • System Security Plans (SSPs)
  • Security Assessment Plans (SAPs)
  • Security Assessment Reports (SARs)
  • Other accreditation-related documentation
• Manage eMASS tasking throughout the accreditation lifecycle, including:
  • Quarterly Independent Verification & Validation (IV&V)
  • Quarterly STIG reviews
  • Annual Security Reviews (ASRs)
  • Monthly POA&M updates
  • ATO, ATC, IATC, and IATT package submissions
• Maintain DISA circuit connections (CCSDs), system inheritances, and cloud service provider accreditation dependencies.
• Perform cybersecurity monitoring and incident triage to evaluate scope, severity, and impact of security incidents.
• Identify vulnerabilities and recommend remediation strategies to strengthen security posture.
• Collaborate with system owners, ISSOs, security teams, and government stakeholders to maintain compliance and operational readiness.
• Support accreditation schedules, audit readiness activities, and ongoing RMF compliance requirements.

Requirements:

• 10+ years of experience in cybersecurity, information assurance, incident response, or related security disciplines.
• Strong experience supporting RMF, DoD cybersecurity compliance, and A&A activities.
• Experience developing and maintaining accreditation documentation within eMASS.
• Knowledge of STIG compliance, POA&M management, vulnerability assessment, and cybersecurity risk analysis.
• Strong understanding of cybersecurity monitoring, incident response, and remediation processes.
• Experience with security testing, auditing, and compliance assessments.
• Proficiency with cybersecurity tools, IT security platforms, and web security technologies.

Education & Certifications:

Required Certification (IAM Level II): One of the following:

• CAP
• CASP+
• CISM
• CISSP (Associate accepted)
• GSLC

Preferred:

• CISSP Certification

Clearance Requirement:

• Active Secret Clearance required

Compensation:

Salary Range: $170,000 - $180,000 depending on experience

Full Benefits Include:

• Medical
• Dental
• Vision
• 401(k)
• Paid Time Off
• Sick Leave if Required by Law

This job opens for applications on 11/4/2026. Applications for this job will be accepted for at least 30 days from the posting date.

#LI-CB1

#LI-ONSITE

Keywords: Cybersecurity Engineer, RMF, Risk Management Framework, Assessment & Authorization, A&A, eMASS, SSP, SAP, SAR, POA&M, STIG, IV&V, Annual Security Review, ATO, ATC, IATC, IATT, Information Assurance, Information System Security Officer, ISSO, Vulnerability Management, Incident Response, Security Compliance, NIST 800-53, DoD Cybersecurity, Security Controls, Accreditation, Security Auditing, Security Assessment, DISA, CCSD, Risk Assessment, Cyber Monitoring, Security Engineering, Information Security, Federal Cybersecurity, Cloud Security, Compliance Management, Security Operations, Threat Analysis, Security Documentation, Vulnerability Assessment, Security Remediation.