> Markdown version of [/jobs/ext/2313135-cybersecurity-engineer-iam-ii-iii-level](https://www.wearedevelopers.com/jobs/ext/2313135-cybersecurity-engineer-iam-ii-iii-level). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer (IAM II/III level)

- **Company:** Seneca Resources
- **Location:** San Diego, CA, United States
- **Experience:** Experienced
- **Salary:** $140,000.0 - $150,000.0
- **Contract:** Temporary to permanent
- **Skills:** Artificial Intelligence, Cyber Security, Identity and Access Management, IT Management, Cloud Services, Software Vulnerability Management, SARS Software Products, Data Analytics, Plan of Action and Milestones
- **Published:** August 30, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9123614/cybersecurity-engineer-iam-iiiii-level

## About the Role

* 10+ years of cybersecurity or incident response experience in a DoD or federal environment
 * Active IAM II-qualifying certification: CISSP (or Associate), CISM, CASP+, CGRC/CAP, or GSLC - CISSP preferred
 * Hands-on experience with eMASS, STIGs, and POA&M authorship within the DoD RMF lifecycle
 * Demonstrated experience with security controls, vulnerability management, and remediation
 * Proficiency with cybersecurity monitoring, security testing, auditing, and IT security tooling
 * Experience with data analytics and risk assessment in a federal program context
 * US citizenship and an active Secret clearance

## Description

* Supporting the NIWC PAC IT Management Support Services contract, contributing directly to Assessment and Authorization accreditation efforts
 * Maintaining cybersecurity monitoring operations and performing triage to assess scope, impact, and remediation strategies for identified vulnerabilities
 * Testing and applying security controls based on security categorization, overlays (privacy, classified, intel), and control tailoring (AI, NOFORN)
 * Conducting active and passive data reconnaissance and authoring POA&Ms with accurate mitigation statements, milestone tracking, and control mapping
 * Developing comprehensive A&A documentation including SSPs, SAPs, and SARs
 * Adhering to eMASS scheduled tasking across the accreditation cycle: quarterly IV&V, quarterly STIG checks, Annual Security Reviews, monthly POA&M updates, and ATO/ATC/IATC/IATT resubmissions
 * Maintaining DISA circuit connections (CCSDs), system inheritance from accredited environments and cloud service providers, and the workflow schedule on accreditations


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Your Manager Doesn’t Come with a User Manual (But You Can Totally Write One)](https://www.wearedevelopers.com/videos/1495-your-manager-doesn-t-come-with-a-user-manual-but-you-can-totally-write-one)
- [Leverage Cloud Computing Benefits with Serverless Multi-Cloud ML ](https://www.wearedevelopers.com/videos/78-leverage-cloud-computing-benefits-with-serverless-multi-cloud-ml)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)