Senior Cyber Security Engineer – Hybrid/Remote & IR

Colonial Group; Beltsville (MD); Hybrid; USD 120,000 - 160,000; Full time

Job summary

ASRC Federal’s Shared Services team in Beltsville, MD seeks a Senior Cyber Security Engineer to bolster enterprise security operations. Hybrid role requiring at least 2 days on-site, with remote work options.

The ideal candidate will lead vulnerability management, compliance scans, incident response, and SIEM/EDR orchestration across Windows AD, Azure, and GCC/GCC High environments. Strong scripting skills (PowerShell/Python) are essential.

Qualifications

• 7+ years in vulnerability scanning, compliance assessments, STIG benchmarking, security config assessments, and technical adjudication.
• Experience in enterprise Windows architecture, AD, GPOs, permissions, authentication, and access control.
• Strong scripting and documentation skills, ability to work independently in a fast-paced enterprise.

Responsibilities

• Operate and maintain enterprise vulnerability and compliance scanning platforms.
• Perform vulnerability and config assessments to identify and remediate weaknesses.
• Conduct STIG benchmarking and adjudication with documented remediation or exceptions.
• Manage security technologies (EDR/EPP/XDR, SIEM) and close gaps in logging and telemetry.
• Investigate and respond to security alerts including phishing, malware, and credential compromise.
• Serve as Tier II/III escalation for complex investigations and incidents.
• Perform incident response: triage, containment, eradication, recovery, root cause analysis.
• Maintain understanding of Windows/AD, GPOs, permissions, and access controls.
• Support security engineering across Azure and M365 environments (GCC/GCC High).
• Develop automation with PowerShell/Python to support operations and remediation.
• Collaborate with infra, network, endpoint, identity, cloud, and apps teams.
• Document findings, timelines, remediation, and risk-based adjudications.
• Develop security metrics, KPIs, dashboards, and executive-level reports.

Skills

Vulnerability scanning

Security incident response

PowerShell scripting

Python scripting

Analytical thinking

Troubleshooting

Communication

Team collaboration

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Tenable Security Center

Tenable Vulnerability Management

Defender for Endpoint

Defender for Identity

Defender for Office 365

Microsoft Sentinel

Active Directory

Job description

ASRC Federal’s Shared Services team in Beltsville, MD seeks a Senior Cyber Security Engineer to bolster enterprise security operations. Hybrid role requiring at least 2 days on-site, with remote work options.

The ideal candidate will lead vulnerability management, compliance scans, incident response, and SIEM/EDR orchestration across Windows AD, Azure, and GCC/GCC High environments. Strong scripting skills (PowerShell/Python) are essential.