Join ASRC Federal on the Shared Services team in Beltsville, MD for a hybrid role supporting enterprise security engineering, vulnerability and compliance management, and security operations. You will help maintain security tooling, improve threat detection and response workflows, and strengthen security posture across Windows, identity, endpoint, and cloud environments. The position offers a salary range of USD 111,000 - 180,000 per year, with benefits including health, dental, and vision, life insurance, a 401(k), education assistance, and paid time off (PTO, holidays, and any other paid leave required by law).
What You’ll Do
- Operate and maintain enterprise vulnerability and compliance scanning platforms, including scan policies, repositories, asset groups, credentials, schedules, and reporting.
- Conduct vulnerability assessments, security configuration assessments, and compliance scans to identify, prioritize, and track remediation of security weaknesses.
- Perform STIG benchmarking, analyze findings, complete technical adjudications, and document remediation or applicable exceptions.
- Manage and optimize security technologies including EDR/EPP/XDR and SIEM, identifying and addressing gaps in security coverage, configuration, logging, and telemetry.
- Investigate and respond to security alerts tied to phishing, malicious URLs, malware, credential compromise, suspicious authentication activity, and endpoint threats.
- Serve as a Tier II/Tier III escalation point for complex investigations, engineering issues, and cybersecurity incidents.
- Support incident response activities across triage, containment, eradication, recovery, and root cause analysis.
- Apply strong knowledge of Windows and enterprise infrastructure, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access controls.
- Support security engineering and assessments across Microsoft Azure and Microsoft 365, including GCC and GCC High where applicable.
- Develop scripts and automation using PowerShell, Python, or similar technologies to support security operations, vulnerability management, assessment, and response.
- Collaborate with infrastructure, networking, endpoint, identity, cloud, and application teams during investigations, assessments, and remediation.
- Document technical findings, assessment results, incident timelines, remediation recommendations, and risk-based adjudications.
- Develop and maintain security metrics, KPIs, dashboards, and on-demand reports to communicate security posture, trends, risks, and operational performance.
Required Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
- 9+ years of hands-on experience in vulnerability scanning, compliance assessments, STIG benchmarking, security configuration assessments, and technical adjudication.
- Must be a U.S. Citizen or Permanent Resident (Green Card Holder).
- Experience in cybersecurity engineering, vulnerability management, security operations, incident response, or related fields.
- Strong understanding of Windows operating systems and enterprise Windows architecture, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access control.
- Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and enterprise network architecture.
- Experience with endpoint security technologies such as EDR, EPP, or XDR.
- Proficiency in PowerShell; experience with Python or similar scripting languages preferred.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Ability to work independently and collaboratively in a fast-paced enterprise environment.
Certifications
- CISSP, GCIH, GCIA, Security+, CEH, or equivalent (at least one is required).
Technologies You’ll Work With
PowerShell, Python, EDR, EPP, XDR, SIEM, Tenable Security Center, Tenable Vulnerability Management, DISA STIGs, SCAP, STIG adjudication, Defender for Endpoint, Defender for Identity, Defender for Office 365, Microsoft Sentinel, Microsoft Azure, Microsoft 365, GCC, GCC High, MITRE ATT&CK, SOAR, TCP/IP, DNS, HTTP/S, VPNs, firewalls, Windows, Active Directory, Group Policy Objects (GPOs), CMMC, NIST 800-53, NIST 800-171, FedRAMP.
Preferred Qualifications
- Experience with Tenable Security Center/Tenable Vulnerability Management, including enterprise architecture, repositories, asset tagging, scan configuration, credentialed scanning, and compliance scanning.
- Experience with DISA STIGs, SCAP, security benchmarks, and STIG adjudication.
- Experience with Microsoft security technologies such as Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel.
- Experience with Microsoft Azure, Microsoft 365, GCC, and GCC High security configurations.
- Experience with MITRE ATT&CK, threat intelligence platforms, SOAR, or security automation.
- Experience supporting cybersecurity frameworks such as CMMC, NIST 800-53, NIST 800-171, FedRAMP, or DISA security requirements.
Location and Work Model
- Hybrid/Primarily Remote (at least 2 days onsite)
- Shared Services team located in Beltsville, MD
EEO Statement: ASRC Federal and its Subsidiaries are Equal Opportunity employers.
