assessment-and-authorization jobs in San Diego

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).…See more Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).

Systems Network Engineer II/III will design, implement, and support resilient network architectures across shipboard and enterprise environments while ensuring cybersecurity compliance and risk mitigation. The role requires assessing vulnerabilities, proposing remediation strategies, documenting configuration and architectural changes at engineering level, and coordinating approvals through engineering change and cybersecurity governance processes.…See more The person will support operational events with hands-on testing and implementation aboard ship, provide training to ship's force, and liaise across cloud, computer engineering, cybersecurity, and operational teams. A Bachelor's degree with 9+ years of network engineering, tactical networks, or related infrastructure experience is required, along with an active Secret clearance and ability to obtain TS/SCI.

Lead cybersecurity program delivery for NSWC Corona's Risk Management Framework and continuous authorization services. Manage a team of ISSMs, ISSOs, and cybersecurity analysts while serving as primary interface with Navy leadership and government stakeholders.…See more Oversee contract lifecycle, financials, and compliance across A&A packages and continuous monitoring; drive process improvements in eMASS workflows and RMF execution. Provide strategic guidance on DoD/Navy cybersecurity policy, emerging threats, and system acquisition integration.

Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.…See more Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Senior Cybersecurity Engineer supporting Navy and DoD mission systems. The role involves applying cybersecurity engineering principles across the system lifecycle—building threat models (STRIDE, PASTA, attack trees), analyzing complex systems and networks for vulnerabilities, assessing cyber risk and mission impact, and translating findings into actionable engineering recommendations.…See more Requires 7+ years of industry experience, a Bachelor's in a technical field (Cybersecurity, Computer Science, Systems Engineering, or related), demonstrated threat-modeling expertise, and DoD 8570.01 IAM/IAT/IASAE certification.

As a Cybersecurity Engineer and Risk Analyst, you will identify vulnerabilities, assess security threats, and implement infrastructure and cybersecurity controls to protect military systems. You'll conduct risk and vulnerability assessments across networks, systems, and applications, work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, and develop security solutions using tools like ACAS, STIGs, and eMASS.…See more The role requires 4+ years of DoD/government IT experience, hands-on cybersecurity compliance testing, and the ability to communicate complex security concepts to technical and non-technical audiences.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability assessments, risk analysis, and compliance testing across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, leverage tools like ACAS and eMASS to identify threats and security gaps, and communicate security findings to both technical and non-technical audiences.…See more The role requires hands-on experience with security controls, policy implementation, and infrastructure protection using industry-standard scanning and compliance tools.

ManTech seeks an Information System Security Officer to maintain Assessment & Authorization (A&A) documentation per NIST and DoD standards, track compliance deficiencies via Plans of Action and Milestones, implement continuous monitoring strategies, and oversee audit log systems and patch management. The role requires managing security tools, evaluating system configuration changes, and supporting an Information System Security Manager (ISSM) with compliance and incident response procedures.…See more Candidates must hold Security+ certification, have 2+ years of RMF and NIST SP 800-53 experience, and possess an active Top Secret clearance with SCI eligibility.

This Systems Network Engineer II/III role focuses on designing, implementing, and sustaining network systems across shipboard, enterprise, and tactical environments while ensuring cybersecurity compliance and resilience. The engineer will assess vulnerabilities and risks, propose remediation and mitigation strategies, document configuration and architecture changes, and coordinate engineering change and security authorization processes.…See more The role requires coordinating across cloud, computer engineering, cybersecurity, and operational stakeholders to support production and operational events, including on-ship testing and implementation. Candidates must have a Bachelor's degree plus 9+ years of experience (or equivalent with advanced degree) and an active Secret clearance with ability to obtain TS/SCI.

The Cybersecurity Engineer III will support Assessment and Authorization accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include analyzing cybersecurity directives and policies (CTOs, FRAGOs, IAVMs, STIG requirements), developing compliance strategies aligned with federal and defense security standards, and performing risk analysis and independent verification of security configurations.…See more The role requires in-depth Risk Management Framework knowledge, FISMA data reporting support, and use of compliance tracking tools such as VRAM. This position requires a Secret clearance, IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), and 10+ years of cybersecurity or incident response experience.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SAR), and managing eMASS tasking including quarterly IV&V, STIG checks, and annual security reviews.…See more The role requires 10+ years of cybersecurity or incident response experience, a Secret clearance, IAM II certification, and one of CAP, CASP, CISM, CISSP, or GSLC. The engineer must demonstrate proficiency in security testing, auditing, risk assessment, and IT security tools.

A Systems Network Engineer II/III role supporting naval and operational network environments, responsible for designing, implementing, and troubleshooting resilient network architectures while ensuring cybersecurity compliance and risk mitigation. The engineer will assess vulnerabilities, document configuration and design changes at line-level detail, coordinate engineering change and cyber authorization processes, and provide both on-site shipboard support and remote technical guidance.…See more The role requires expertise in network architecture, tactical data links, WAN design, cybersecurity policy, and Assessment & Authorization practices, with coordination across cloud, computer engineering, cybersecurity, and operational teams.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.

This is a network engineering role focused on designing, implementing, troubleshooting, and sustaining tactical and enterprise network systems with a strong cybersecurity emphasis. The engineer will work with WAN-level architectures, routing, connectivity, and tactical data links while assessing cybersecurity risks across deployed systems and coordinating with cross-functional stakeholders.…See more The role requires deep experience in network architecture, cybersecurity policy, security controls, vulnerability management, and the ability to document and communicate technical risks and network designs to both engineering and operational audiences.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, including maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SARs), and managing eMASS tasking throughout the accreditation cycle.…See more The role requires in-depth knowledge of the Risk Management Framework, DISA circuit connections, and cloud service provider inheritance. This position requires a Secret clearance, IAT Level III certification, and one of several advanced certifications (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH), plus 10+ years of cybersecurity or incident response experience.

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation.…See more The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll troubleshoot complex security challenges, manage Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities, and implement cybersecurity controls using tools like ACAS, STIGs, and eMASS.…See more The role requires 3+ years of DoD/government IT experience, expertise in operating systems (Windows, Linux), network infrastructure (routers, switches, firewalls, zero-trust), and compliance testing. You will communicate security findings to both technical and non-technical audiences while identifying advanced threats and supporting Navy missions.