Senior Cyber Security Engineer

Job  :
Beltsville, MD, USAPay: USD 111000 - 180000 (Salary)
Posted:
Job Family:
Information Technology Job Function:
Cyber Security

Pay Type:

Salary ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™ ASRC Federal is seeking a Senior Cyber Security Engineer to be a member of our Shared Services team located in Beltsville, MD.

Work location:

Hybrid/Primarily Remote (at least 2 days onsite)

Summary:

The ideal candidate will be responsible for enterprise security engineering, vulnerability and compliance management, security tool administration, incident response, and Tier II Security Operations Center (SOC) support within an enterprise environment. This role focuses on implementing and maintaining security technologies, performing vulnerability and configuration assessments, identifying and remediating security weaknesses, responding to cyber incidents, and improving enterprise security capabilities.

The Senior Cyber Security Engineer will have strong hands-on experience with vulnerability management, security configuration assessments, STIG benchmarking and adjudication, Windows and Active Directory environments, endpoint security technologies, network architecture, and enterprise security operations.

Experience with Tenable architecture, cloud security, and Microsoft GCC/GCC High environments is highly desirable.

Key Responsibilities Operate and maintain enterprise vulnerability and compliance scanning platforms, including scan policies, repositories, asset groups, credentials, schedules, and reporting.

Perform vulnerability assessments, security configuration assessments, and compliance scans to identify, prioritize, and track remediation of security weaknesses.

Conduct STIG benchmarking, analyze findings, perform technical adjudications, and document remediation or applicable exceptions.

Manage and optimize enterprise security technologies such as EDR/EPP/XDR, and SIEM, and identify and remediate gaps in security coverage, configuration, logging, and telemetry.

Investigate and respond to security alerts involving phishing, malicious URLs, malware, credential compromise, suspicious authentication activity, and endpoint threats.

Serve as a Tier II/Tier III escalation point for complex security investigations, engineering issues, and cybersecurity incidents.

Perform incident response activities including triage, containment, eradication, recovery, and root cause analysis.

Maintain strong understanding of Windows and enterprise infrastructure, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access controls.

Support security engineering and assessment activities across Microsoft Azure and Microsoft 365 environments, including GCC and GCC High where applicable.

Develop scripts and automation using Power Shell, Python, or similar technologies to support security operations, vulnerability management, assessment, and response activities.

Collaborate with infrastructure, networking, endpoint, identity, cloud, and application teams during security investigations, assessments, and remediation efforts.

Document technical findings, security assessments, incident timelines, remediation recommendations, and risk-based adjudications.

Develop and maintain security metrics, KPIs, dashboards, and on-demand reports to communicate security posture, trends, risks, and operational performance to technical and business stakeholders.

Required Qualifications Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
9+ years of hands-on experience in vulnerability scanning, compliance assessments, STIG benchmarking, security configuration assessments, and technical adjudication.

Must be a U.S. Citizen or Permanent Resident (Green Card Holder).

Experience with cybersecurity engineering, vulnerability management, security operations, incident response, or related fields.

Strong understanding of Windows operating systems and enterprise Windows architecture, e.g., Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access control.

Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and enterprise network architecture.

Experience with endpoint security…