Cybersecurity Engineer III; Secret Clearance

Zachary Piper Solutions is seeking a Cybersecurity Engineer III to support a program for NIWC PAC in San Diego, CA. The team is seeking an experienced engineer to support Assessment and Authorization (A&A) for the IT Management Support services contract. Details below:

Clearance:
Secret clearance

Location:
San Diego, CA (100% onsite)

• Implement and assess security controls based on system categorization, applicable overlays, and tailored security requirements.
• Conduct active and passive reconnaissance, identify security gaps, and develop POA&M with validated mitigation actions and milestone tracking.
• Create and maintain A&A documentation, including SSPs, SAPs, SARs, and other authorization artifacts.
• Manage eMASS compliance activities, including IV&Vs, STIG assessments, ASRs, POA&M updates, and ATO-related submissions.
• Maintain DISA circuit connections (CCSDs), oversee inherited controls, and coordinate accreditation workflows and schedules.

• Active Secret Clearance
• Bachelor’s degree from an accredited university and 10+ years of cybersecurity experience
• IAT III certifications (one of the following): CASP+, CCNP Security, CISA, CISSP, GCED, GCIH (CISSP strongly preferred)
• Experience conducting A&A of security systems and devices and submitting for ATO
• Documentation experience with System Security Plans (SSPs), Security Assessment Plan (SAP), POA&Ms

• Total compensation based on experience level - $135,000-$150,000 based on experience level
• Full Benefits: PTO, Paid Holidays, Medical, Dental, and Vision, 401k
• Certification reimbursement
• Long-term, fully funded program

#LI-MK1 #LI-Onsite

(RMF), Assessment and Authorization (A&A), System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), eMASS, Security Controls Assessment, TS/SCI, Secret, security clearance, top secret, DoD, W2, opentowork, hiring, cyber, cybersecurity, incident response, ATO, Security Control Implementation, Security Control Tailoring, Security Categorization, NIST SP 800-53, Continuous Monitoring, POA&M Management, Plan of Action and Milestones (POA&M), Vulnerability Assessment, Compliance Assessment, Active Reconnaissance, Passive Reconnaissance, STIG Compliance, STIG Assessment, Quarterly IV&V, Annual Security Review (ASR), Authorization to Operate (ATO), Interim Authorization to Test (IATT), Authorization to Connect (ATC), Interim Authorization to Connect (IATC), Cybersecurity Compliance, Security Authorization, Control Validation, Risk Assessment, Mitigation Planning, Milestone Tracking, Security Documentation, Accreditation Management, DISA Requirements, CCSD Management, Cloud Security, Inherited Controls, FedRAMP, DoD Cybersecurity, Governance Risk and Compliance (GRC), Continuous Authorization, Security Auditing, Security Lifecycle Management, Information Assurance, System Accreditation, Security Compliance Monitoring, Security Governance