Senior Cyber Security Engineer

ASRC Federal is seeking a Senior Cyber Security Engineer to be a member of our Shared Services team located in Beltsville, MD.
Work location: Hybrid/Primarily Remote (at least 2 days onsite)
Summary: The ideal candidate will be responsible for enterprise security engineering, vulnerability and compliance management, security tool administration, incident response, and Tier II Security Operations Center (SOC) support within an enterprise environment. This role focuses on implementing and maintaining security technologies, performing vulnerability and configuration assessments, identifying and remediating security weaknesses, responding to cyber incidents, and improving enterprise security capabilities.
The Senior Cyber Security Engineer will have strong hands-on experience with vulnerability management, security configuration assessments, STIG benchmarking and adjudication, Windows and Active Directory environments, endpoint security technologies, network architecture, and enterprise security operations. Experience with Tenable architecture, cloud security, and Microsoft GCC/GCC High environments is highly desirable.
Key Responsibilities

Operate and maintain enterprise vulnerability and compliance scanning platforms, including scan policies, repositories, asset groups, credentials, schedules, and reporting.
Perform vulnerability assessments, security configuration assessments, and compliance scans to identify, prioritize, and track remediation of security weaknesses.
Conduct STIG benchmarking, analyze findings, perform technical adjudications, and document remediation or applicable exceptions.
Manage and optimize enterprise security technologies such as EDR/EPP/XDR, and SIEM, and identify and remediate gaps in security coverage, configuration, logging, and telemetry.
Investigate and respond to security alerts involving phishing, malicious URLs, malware, credential compromise, suspicious authentication activity, and endpoint threats.
Serve as a Tier II/Tier III escalation point for complex security investigations, engineering issues, and cybersecurity incidents.
Perform incident response activities including triage, containment, eradication, recovery, and root cause analysis.
Maintain strong understanding of Windows and enterprise infrastructure, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access controls.
Support security engineering and assessment activities across Microsoft Azure and Microsoft 365 environments, including GCC and GCC High where applicable.
Develop scripts and automation using PowerShell, Python, or similar technologies to support security operations, vulnerability management, assessment, and response activities.
Collaborate with infrastructure, networking, endpoint, identity, cloud, and application teams during security investigations, assessments, and remediation efforts.
Document technical findings, security assessments, incident timelines, remediation recommendations, and risk-based adjudications.
Develop and maintain security metrics, KPIs, dashboards, and on-demand reports to communicate security posture, trends, risks, and operational performance to technical and business stakeholders.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
7+ years of hands-on experience in vulnerability scanning, compliance assessments, STIG benchmarking, security configuration assessments, and technical adjudication.
Must be a U.S. Citizen or Permanent Resident (Green Card Holder).
Experience with cybersecurity engineering, vulnerability management, security operations, incident response, or related fields.
Strong understanding of Windows operating systems and enterprise Windows architecture, e.g., Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access control.
Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and enterprise network architecture.
Experience with endpoint security technologies such as EDR, EPP, or XDR.
Proficiency in PowerShell; experience with Python or similar scripting languages preferred.
Strong analytical, troubleshooting, documentation, and communication skills.
Ability to work independently and collaboratively in a fast-paced enterprise environment.

Preferred Qualifications

Certifications such as CISSP, GCIH, GCIA, Security+, CEH, or equivalent (at least one is required).
Experience with Tenable Security Center/Tenable Vulnerability Management, including enterprise architecture, repositories, asset tagging, scan configuration, credentialed scanning, and compliance scanning.
Experience with DISA STIGs, SCAP, security benchmarks, and STIG adjudication.
Experience with Microsoft security technologies such as Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel.
Experience with Microsoft Azure, Microsoft 365, GCC, and GCC High security configurations.
Experience with MITRE ATT&CK, threat intelligence platforms, SOAR, or security automation.
Experience supporting cybersecurity frameworks such as CMMC, NIST 800-53, NIST 800-171, FedRAMP, or DISA security requirements.