Senior Cyber Defense Engineer (Hybrid/Remote)

ASRC Federal Holding Company; Beltsville (MD); Hybrid; USD 111,000 - 180,000; Full time

Benefits offered by this job

Health insurance

401(k)

Education assistance

Competitive pay

Job summary

ASRC Federal is seeking a Senior Cyber Security Engineer to join the Shared Services team in Beltsville, MD. The role emphasizes enterprise security engineering, vulnerability/compliance management, tool administration, incident response, and Tier II SOC support within an enterprise environment.

Ideal candidates have extensive hands-on experience with vulnerability management, STIG benchmarking, and Windows/AD environments.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT or equivalent.
• 9+ years hands-on in vulnerability scanning, compliance, STIG benchmarking, configuration, and adjudication.
• U.S. Citizen or Permanent Resident (Green Card).
• Experience in cybersecurity engineering, vulnerability management, security operations, incident response.
• Strong Windows OS understanding: AD, GPOs, permissions, auth, access control.
• Strong networking knowledge: TCP/IP, DNS, HTTP/S, VPNs, firewalls.
• Experience with EDR/EPP/XDR endpoints.
• PowerShell proficiency; Python or similar scripting helpful.
• Analytical, troubleshooting, documentation, and communication skills.
• Ability to work independently in a fast-paced enterprise.

Responsibilities

• Operate and maintain enterprise vulnerability and compliance scanning platforms.
• Perform vulnerability assessments, configuration assessments, and remediation tracking.
• Conduct STIG benchmarking, adjudication, and documentation of exceptions.
• Manage security techs like EDR/EPP/XDR and SIEM; identify gaps in coverage.
• Investigate and respond to security alerts including phishing, malware, and credential compromise.
• Serve as Tier II/III escalation for complex investigations and incidents.
• Lead incident response activities: triage, containment, eradication, recovery, RCA.
• Maintain understanding of Windows/AD, GPOs, permissions, authentication, access controls.
• Support security engineering across Azure and Microsoft 365 including GCC/GCC High.
• Develop scripts in PowerShell/Python to support operations.
• Collaborate with cross-functional teams during investigations and remediation.
• Document findings, timelines, remediation steps, and risk adjudications.
• Develop security metrics, dashboards, and reports for stakeholders.

Skills

Vulnerability scanning

Security operations

PowerShell

Python

Windows AD

EDR/EPP/XDR

SIEM

Incident response

Networking

Education

Bachelor's degree

Tools

Tenable Security Center

GCC High

Microsoft Defender

Azure

Job description

ASRC Federal is seeking a Senior Cyber Security Engineer to join the Shared Services team in Beltsville, MD. The role emphasizes enterprise security engineering, vulnerability/compliance management, tool administration, incident response, and Tier II SOC support within an enterprise environment.

Ideal candidates have extensive hands-on experience with vulnerability management, STIG benchmarking, and Windows/AD environments.