Senior Cyber Security Engineer

Colonial Group; Beltsville (MD); Hybrid; USD 130,000 - 180,000; Full time

Job summary

ASRC Federal seeks a Senior Cyber Security Engineer to join the Shared Services team in Beltsville, MD. The role is hybrid/remote with at least 2 days on site and focuses on enterprise security engineering, vulnerability management, and incident response.

The ideal candidate will have strong hands-on experience with Windows/AD, EDR/XDR, and automation using PowerShell or Python, supporting security across Azure and GCC/GCC High environments.

Qualifications

• 9+ years of hands-on experience in vulnerability scanning and STIG benchmarking.
• U.S. Citizen or Permanent Resident (Green Card).
• Bachelor’s degree in Cybersecurity, CS, IT or equivalent.
• Strong Windows/Active Directory expertise.
• PowerShell proficiency; Python preferred.
• Strong communication and documentation skills.
• Ability to work independently in a fast-paced environment.

Responsibilities

• Operate vulnerability and compliance scanning platforms with policies and reporting.
• Perform assessments and prioritize remediation of weaknesses.
• Adjudicate STIG findings and document remediation or exceptions.
• Manage EDR/EPP/XDR, SIEM, and close security gaps.
• Investigate and respond to security alerts and incidents.
• Provide Tier II/III escalation for investigations and incidents.
• Develop automation scripts to support security operations.
• Document findings, timelines, and remediation recommendations.
• Develop security metrics and reports for stakeholders.

Skills

Vulnerability scanning

Security configuration management

STIG benchmarking

Incident response

PowerShell

Python scripting

Windows/AD expertise

Troubleshooting

Documentation & reporting

Cross-functional collaboration

Education

Bachelor’s degree (Cybersecurity/CS/IT)

Tools

Tenable Security Center

Tenable Vulnerability Management

EDR/EPP/XDR

SIEM

Azure

GCC/GCC High

Microsoft Defender

Job description

ASRC Federal is seeking a Senior Cyber Security Engineer to be a member of our Shared Services team located in Beltsville, MD.

Work location: Hybrid/Primarily Remote (at least 2 days onsite)

Summary: The ideal candidate will be responsible for enterprise security engineering, vulnerability and compliance management, security tool administration, incident response, and Tier II Security Operations Center (SOC) support within an enterprise environment. This role focuses on implementing and maintaining security technologies, performing vulnerability and configuration assessments, identifying and remediating security weaknesses, responding to cyber incidents, and improving enterprise security capabilities.

The Senior Cyber Security Engineer will have strong hands‑on experience with vulnerability management, security configuration assessments, STIG benchmarking and adjudication, Windows and Active Directory environments, endpoint security technologies, network architecture, and enterprise security operations. Experience with Tenable architecture, cloud security, and Microsoft GCC/GCC High environments is highly desirable.

Key Responsibilities

• Operate and maintain enterprise vulnerability and compliance scanning platforms, including scan policies, repositories, asset groups, credentials, schedules, and reporting.
• Perform vulnerability assessments, security configuration assessments, and compliance scans to identify, prioritize, and track remediation of security weaknesses.
• Conduct STIG benchmarking, analyze findings, perform technical adjudications, and document remediation or applicable exceptions.
• Manage and optimize enterprise security technologies such as EDR/EPP/XDR, and SIEM, and identify and remediate gaps in security coverage, configuration, logging, and telemetry.
• Investigate and respond to security alerts involving phishing, malicious URLs, malware, credential compromise, suspicious authentication activity, and endpoint threats.
• Serve as a Tier II/Tier III escalation point for complex security investigations, engineering issues, and cybersecurity incidents.
• Perform incident response activities including triage, containment, eradication, recovery, and root cause analysis.
• Maintain strong understanding of Windows and enterprise infrastructure, including Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access controls.
• Support security engineering and assessment activities across Microsoft Azure and Microsoft 365 environments, including GCC and GCC High where applicable.
• Develop scripts and automation using PowerShell, Python, or similar technologies to support security operations, vulnerability management, assessment, and response activities.
• Collaborate with infrastructure, networking, endpoint, identity, cloud, and application teams during security investigations, assessments, and remediation efforts.
• Document technical findings, security assessments, incident timelines, remediation recommendations, and risk-based adjudications.
• Develop and maintain security metrics, KPIs, dashboards, and on-demand reports to communicate security posture, trends, risks, and operational performance to technical and business stakeholders.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent professional experience.
• 9+ years of hands‑on experience in vulnerability scanning, compliance assessments, STIG benchmarking, security configuration assessments, and technical adjudication.
• Must be a U.S. Citizen or Permanent Resident (Green Card Holder).
• Experience with cybersecurity engineering, vulnerability management, security operations, incident response, or related fields.
• Strong understanding of Windows operating systems and enterprise Windows architecture, e.g., Active Directory, Group Policy Objects (GPOs), permissions, authentication, authorization, and access control.
• Strong understanding of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and enterprise network architecture.
• Experience with endpoint security technologies such as EDR, EPP, or XDR.
• Proficiency in PowerShell; experience with Python or similar scripting languages preferred.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to work independently and collaboratively in a fast-paced enterprise environment.

Preferred Qualifications

• Certifications such as CISSP, GCIH, GCIA, Security+, CEH, or equivalent (at least one is required).
• Experience with Tenable Security Center/Tenable Vulnerability Management, including enterprise architecture, repositories, asset tagging, scan configuration, credentialed scanning, and compliance scanning.
• Experience with DISA STIGs, SCAP, security benchmarks, and STIG adjudication.
• Experience with Microsoft security technologies such as Defender for Endpoint, Defender for Identity, Defender for Office 365, and Microsoft Sentinel.
• Experience with Microsoft Azure, Microsoft 365, GCC, and GCC High security configurations.
• Experience with MITRE ATT&CK, threat intelligence platforms, SOAR, or security automation.
• Experience supporting cybersecurity frameworks such as CMMC, NIST 800‑53, NIST 800‑171, FedRAMP, or DISA security requirements.