> Markdown version of [/jobs/ext/2253498-cybersecurity-engineer-iii](https://www.wearedevelopers.com/jobs/ext/2253498-cybersecurity-engineer-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer III

- **Company:** Zachary Piper
- **Location:** San Diego, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, SARS Software Products, SC Clearance, Information Technology, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** August 26, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9118645/cybersecurity-engineer-iii

## About the Role

* 10+ years of experience in cybersecurity, information assurance, incident response, or RMF compliance environments.
 * Experience with RMF, eMASS, DISA STIGs, POA&M management, vulnerability assessment tools, and security control validation.
 * Strong understanding of cybersecurity monitoring, risk assessment, auditing, accreditation processes, and security documentation development.
 * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
 * Active Secret Clearance required.
 * DoD 8570/8140 IAT Level III Certification required, including one of the following:
 + CASP+
 + CCNP Security
 + CISA
 + CISSP (or Associate)

## Description

* Support Risk Management Framework (RMF) activities, including security control implementation, testing, and validation.
 * Develop and maintain A&A documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), and POA&Ms.
 * Perform vulnerability assessments, cybersecurity monitoring, incident triage, and remediation tracking activities.
 * Manage eMASS tasking, including Quarterly IV&V reviews, STIG assessments, Annual Security Reviews (ASRs), and POA&M updates.
 * Maintain accreditation workflows, inheritance documentation, DISA circuit connection requirements, and authorization package submissions.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [Unleashing the Power of Developers: Why Cybersecurity is the Missing Piece?!?](https://www.wearedevelopers.com/videos/712-unleashing-the-power-of-developers-why-cybersecurity-is-the-missing-piece)
- [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)