> Markdown version of [/jobs/ext/3376843-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/3376843-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer

- **Company:** Zachary Piper
- **Location:** San Diego, CA, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Technology Security Auditing, Software Vulnerability Management, SARS Software Products, SC Clearance, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 1, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9134277/cybersecurity-engineer

## About the Role

Required Clearance:

 * Active Secret Clearance

Required IAT Level III Certification (one of the following):

 * CASP+
 * CCNP Security
 * CISA
 * CISSP (or Associate)
 * GCED
 * GCIH, * 10+ years of cybersecurity, information assurance, or incident response experience
 * Strong understanding of the Risk Management Framework (RMF)
 * Experience with eMASS and DoD cybersecurity compliance requirements
 * Experience authoring RMF accreditation documentation
 * Knowledge of DISA STIGs, vulnerability management, and security auditing
 * CISSP certification preferred

## Description

* Support Assessment & Authorization (A&A) accreditation efforts in accordance with RMF requirements.
 * Test and apply security controls based on security categorization, overlays (privacy, classified, intelligence, etc.), and security control tailoring.
 * Conduct active and passive reconnaissance activities and assess cybersecurity risks.
 * Develop and maintain Plans of Action & Milestones (POA&Ms) with accurate mitigation strategies and milestone tracking.
 * Create and maintain accreditation documentation including:
 + System Security Plans (SSPs)
 + Security Assessment Plans (SAPs)
 + Security Assessment Reports (SARs)
 + Related RMF documentation
 * Manage eMASS tasking throughout the accreditation lifecycle, including:
 + Quarterly Independent Verification & Validation (IV&V)
 + Quarterly STIG reviews
 + Annual Security Reviews (ASRs)
 + Monthly POA&M updates
 + ATO, ATC, IATC, and IATT package submissions
 * Maintain DISA circuit connections (CCSDs), inheritance relationships, and accreditation workflows.
 * Monitor security posture, perform vulnerability assessments, and recommend remediation actions.
 * Support cybersecurity monitoring and incident response activities.
 * Assess incidents to determine scope, impact, and required corrective actions.
 * Collaborate with stakeholders, system owners, and security teams to maintain compliance requirements.