emass jobs in San Diego

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. The role requires deep expertise in the Risk Management Framework, including designing and tailoring security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing comprehensive A&A documentation (SSP, SAP, SARs).…See more Responsibilities include adherence to eMASS scheduled tasking, quarterly IV&V and STIG checks, annual security reviews, monthly POA&M updates, and managing DISA circuit connections and inheritance workflows. The position requires 10+ years of cybersecurity or incident-response experience and one of several security certifications (CASP+, CAP, CISM, CISSP, or GSLC).

The Cyber Security Analyst develops and maintains assessment documentation, performs ongoing compliance assessments using tools like ACAS, SCAP, and Trellix, and conducts security audits and Site Based Security Assessments (SBSAs) of NCS Family of Systems. The role requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+ with appropriate CE/OS), and expertise in Risk Management Framework (RMF) v3/v5, System Security Plans (SSPs), POA&Ms, STIG remediation, and eMASS.…See more Responsibilities include patching verification, configuration and change management compliance, incident reporting, continuous monitoring, and potential appointment as Information System Security Officer (ISSO) within 6 months.

Senior Cyber Systems Engineer responsible for developing and maintaining RMF artifacts (SSPs, SARs, SAPs, POA&Ms), coordinating with Navy Authorizing Officials and Security Control Assessors, and managing cybersecurity authorization packages for ATO/IATT/IATO activities. The role involves vulnerability remediation, STIG compliance, access control policy development, patch management, and server/network infrastructure oversight.…See more Requires mastery of the Risk Management Framework, CI/CD security pipelines, container hardening (Docker/Kubernetes), infrastructure-as-code tools (Terraform, Ansible), and automated security assessment tools (ACAS/Nessus). Serves as Information Systems Security Manager (ISSM) for product ATOs and coordinates with government agencies to ensure DoD and Navy cyber security requirements are met.

Lead information systems security for a cleared defense contractor, managing a team of ISSOs and Security Administrators through the RMF process while ensuring compliance with NISPOM, DCSA, and NIST 800-53 standards. Responsibilities include vulnerability management, STIG compliance, security incident investigation, insider threat coordination, and preparation for DCSA assessments.…See more Requires 8+ years IT experience with 5+ years as an ISSM in a cleared facility, proficiency in Windows/Linux, eMASS, Tenable, SIEM tools, and IAM Level 3 certification (CISSP, CISM, or GSLC). Strong background in container orchestration, infrastructure automation, and DevSecOps methodologies is valued.

Serve as an independent, third-party cybersecurity assessor and RMF (Risk Management Framework) team lead for Navy systems under the NSWC Corona CCAM contract. Execute comprehensive security assessments of IT, PIT, and OT systems against DoD and NAVSEA standards; validate NIST 800-53 control implementations; analyze vulnerability data and STIG compliance; generate Security Assessment Reports and Risk Assessment Reports; and provide mentorship to ISSMs and ISSOs.…See more Requires NQV Level III certification, active TS/SCI clearance, seven years of cybersecurity experience with four years in RMF assessments, and DoD 8570 IAM Level II/III baseline certification.

Lead cybersecurity operations for Naval Surface Warfare Center Corona enclaves and Platform IT systems, owning the complete Risk Management Framework (RMF) Authorization to Operate process under DoD Instruction 8510.01. Oversee ISSOs and System Administrators, develop and maintain System Security Plans, Security Assessment Reports, and Risk Assessment Reports, and manage eMASS records for continuous compliance monitoring.…See more Direct incident response, enforce configuration management policies through Change Control Boards, and conduct STIG/ACAS/SCAP compliance reviews. Requires TS/SCI clearance, Master's in Computer Science/Cybersecurity or equivalent, 8+ years cybersecurity experience, and current DoD 8140/8570 Level III certification (CISSP, CISM, CASP+, or equivalent).

Lead cybersecurity program delivery for NSWC Corona's Risk Management Framework and continuous authorization services. Manage a team of ISSMs, ISSOs, and cybersecurity analysts while serving as primary interface with Navy leadership and government stakeholders.…See more Oversee contract lifecycle, financials, and compliance across A&A packages and continuous monitoring; drive process improvements in eMASS workflows and RMF execution. Provide strategic guidance on DoD/Navy cybersecurity policy, emerging threats, and system acquisition integration.

Information System Security Officer III responsible for securing assigned networks, enclaves, and platform IT systems through vulnerability assessments, STIG compliance verification, and continuous monitoring. The role requires coordinating with engineers and developers to embed security throughout the system development lifecycle, managing RMF documentation and POA&M entries, conducting daily audit log and SIEM alert reviews, and supporting incident response and cyber inspections.…See more Must possess TS/SCI clearance, a bachelor's degree in IT/cybersecurity or equivalent experience, six years of hands-on security implementation and vulnerability analysis, and current DoD 8140/8570 IAM Level II certification.

Cybersecurity Engineer I supporting Assessment & Authorization accreditation efforts under the NIWC PAC contract. Responsibilities include maintaining cybersecurity monitoring operations, conducting vulnerability assessments, performing incident triage, developing A&A documentation (SSP, SAP, SAR), managing POA&Ms, and adhering to Risk Management Framework and eMASS scheduled tasking cycles including STIG checks and ATO/ATC processes.…See more Requires a Bachelor's degree in Cybersecurity, IT, or related field, 1+ years of relevant experience, and IAT II certification (CySA+, Security+, CCNA Security, GICSP, GSEC, or SSCP).

Senior IT Cyber Security Specialist responsible for enterprise vulnerability scanning, system hardening, and patch management using tools like Nessus and HBSS. Administers security technologies including SIEM platforms, firewalls, endpoint protection, and VPNs while investigating security incidents and performing root cause analysis.…See more Requires 7+ years of progressive IT/cybersecurity experience in DoD or defense contractor environments, with strong Linux administration and Bash scripting skills. Must hold DoD 8570.1-M IAM Level III certification (CISSP, CISM, or GSLC) and maintain compliance with NIST SP 800-171, CMMC Level 2, and DISA STIGs.

Lead ServiceNow Developer responsible for designing, implementing, and architecting enterprise ServiceNow solutions for federal government clients. Design security plans ensuring compliance with NIST, RMF, and DoD standards; mentor and coach ServiceNow talent; lead knowledge sharing; and drive client relationships and business growth through solution proposals and platform expertise.…See more Must have 5+ years of ServiceNow implementation/architecture experience, ServiceNow Certified System Administrator certification, and one of CISSP/Security+/CASP+/CISM, with active Secret Clearance required.

Lead the design, implementation, and optimization of ServiceNow solutions for enterprise clients, including platform architecture, system integrations, and performance tuning. Provide technical oversight throughout the delivery lifecycle, ensure compliance with security standards and best practices, and mentor junior developers.…See more Manage stakeholder relationships, contribute to business development by identifying new service opportunities, and stay current with ServiceNow platform developments and industry trends.

Lead the design, implementation, and optimization of ServiceNow solutions for enterprise clients, with 8+ years of experience architecting or implementing the platform. Provide technical oversight to ensure solutions meet quality standards, security requirements, and compliance regulations; manage integrations with third-party systems; and conduct performance analysis.…See more Mentor junior ServiceNow talent, communicate project status to leadership and clients, and identify new service opportunities to drive business growth.

As a Cybersecurity Engineer and Risk Analyst, you will identify vulnerabilities, assess security threats, and implement infrastructure and cybersecurity controls to protect military systems. You'll conduct risk and vulnerability assessments across networks, systems, and applications, work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, and develop security solutions using tools like ACAS, STIGs, and eMASS.…See more The role requires 4+ years of DoD/government IT experience, hands-on cybersecurity compliance testing, and the ability to communicate complex security concepts to technical and non-technical audiences.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) processes, manage security controls and compliance testing using tools like eMASS and ACAS, and identify cyber threats using vulnerability scanning and big-data analytics.…See more The role requires 3+ years of DoD/government IT experience, expertise in RMF/A&A activities, and hands-on knowledge of Windows, Linux, cloud platforms, network infrastructure (routers, switches, firewalls, NIPR/SIPR), and security compliance tools. You'll communicate security complexities to diverse audiences and deliver client solutions from inception through completion.

As a Cybersecurity Engineer and Risk Analyst, you will develop and implement security solutions to protect military infrastructure, performing vulnerability assessments, risk analysis, and compliance testing across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) and Assessment & Authorization (A&A) processes, leverage tools like ACAS and eMASS to identify threats and security gaps, and communicate security findings to both technical and non-technical audiences.…See more The role requires hands-on experience with security controls, policy implementation, and infrastructure protection using industry-standard scanning and compliance tools.

ServiceNow Architect responsible for designing, implementing, and optimizing enterprise ServiceNow solutions with 8+ years of implementation/architecture experience and active Secret Clearance. Lead technical delivery across integration, performance optimization, security/compliance, and quality assurance; mentor junior architects and contribute to business development by identifying new service opportunities.…See more Design security and QA plans, conduct performance analysis, create technical documentation, and maintain strong client relationships while staying current with ServiceNow platform developments and federal compliance standards.

Lead ServiceNow implementation projects for federal clients, managing requirements, design, testing, and delivery of tracking and reporting tools. Collaborate with cross-functional teams and stakeholders to define priorities, develop prototypes, and document system architecture.…See more Requires PMP certification, active Secret clearance, 8+ years project management experience, 4+ years ServiceNow platform experience, and 5+ years leading technology consulting engagements.

Support technical data, training, and software management for U.S. Navy AN/SQQ-89 combat systems across approximately 110 fleet installations.…See more Develop and maintain technical documentation, courseware, and system configuration products; manage MOODLE/LMS content; author training materials with Section 508 compliance; execute TOR documentation and change package management; coordinate fleet exercises and sea trial events. Requires 5–15 years of Navy combat system or technical documentation experience and a DoD SECRET clearance (TS/SCI preferred).

This role performs continuous security monitoring, compliance assessments, and authorization documentation for Department of Defense information systems. The analyst will use tools like ACAS, SCAP, and eMASS to execute Risk Management Framework processes, conduct security audits, manage Plans of Action and Milestones (POA&Ms), and coordinate STIG remediation with system engineers and administrators.…See more The position requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+), and deep knowledge of RMF, system security plans, and automated compliance scanning. The analyst must be able to work independently, manage competing priorities, and be appointed Information System Security Officer (ISSO) within six months.

Senior Systems Engineer leading infrastructure design and integration on Department of Defense programs. Must demonstrate depth in enterprise networking, virtualization/hyperconverged infrastructure, or storage architecture, with working knowledge of DoD cybersecurity compliance (STIGs, eMASS, RMF).…See more Responsible for taking infrastructure from current-state assessment through design, build, test, and customer acceptance, producing engineering documentation and coordinating with OEMs and technology partners. Active Secret clearance required.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), developing A&A documentation (SSP, SAP, SAR), and managing eMASS tasking including quarterly IV&V, STIG checks, and annual security reviews.…See more The role requires 10+ years of cybersecurity or incident response experience, a Secret clearance, IAM II certification, and one of CAP, CASP, CISM, CISSP, or GSLC. The engineer must demonstrate proficiency in security testing, auditing, risk assessment, and IT security tools.

The Cybersecurity Engineer will coordinate cybersecurity activities including preparation and maintenance of Risk Management Framework (RMF) artifacts, risk and vulnerability assessments across network/system/application domains, and day-to-day cyber operations. The role requires performing compliance testing, implementing security controls and policies, working with tools like eMASS and ACAS, and developing security documentation for DoD/government systems up to TS/SCI classification.…See more The candidate must work independently, identify risks and devise mitigation solutions, and communicate findings to both technical and non-technical stakeholders. A bachelor's degree and DoD 8140 qualification (equivalent to former DoD 8570 IAT II) are required, along with 3+ years in cybersecurity, T&E, or Authorization & Accreditation roles.

The ISSE will own an assigned eMASS package and drive interim authorization processes for a Navy client, ensuring RMF compliance and DoD cybersecurity guidance adherence. Key responsibilities include conducting STIG assessments, coordinating remediation activities, developing and maintaining POA&Ms, and supporting Microsoft 365 DDIL security testing.…See more The role requires a Bachelor's degree in Computer Science or related field, 3–5 years of RMF/cybersecurity accreditation experience, and a current DoD 8140 Level II certification (CISSP, CISM, CASP+, or CGRC). An active SECRET clearance is mandatory.

The Cybersecurity Engineer III will support Assessment and Authorization (A&A) accreditation efforts under the NIWC PAC contract, maintaining cybersecurity monitoring operations, performing incident triage, identifying vulnerabilities, and recommending remediation strategies. Responsibilities include testing and applying security controls, conducting reconnaissance, authoring Plans of Milestones and Actions (POA&Ms), and developing A&A documentation such as System Security Plans (SSP) and Security Assessment Reports (SARs).…See more The role requires in-depth knowledge of the Risk Management Framework, eMASS workflow, DISA compliance, and security categorization overlays. A minimum of 10+ years of cybersecurity or incident response experience is required, along with security certifications such as CISSP, CASP, CISM, CAP, or GSLC.