Cybersecurity Tools Engineer

ASRC Federal•Fort Meade, MD

1d•Hybrid

About The Position

ASRC Federal is hiring a Cybersecurity Tools Engineer to support its Defense Counterintelligence Security Agency (DCSA) program based out of Fort Meade, Maryland. The engineer will serve as a technical resource for cybersecurity tools, platforms, and frameworks, helping define and enhance security systems that protect assets, data, and systems across hybrid and multi-cloud environments. The role includes recommending, selecting, integrating, and optimizing cybersecurity technologies; supporting implementation; and assisting incident response and threat analysis teams. It also supports compliance with federal regulations and industry frameworks throughout the lifecycle of security systems, from acquisition through modernization. The position works with cloud security engineering and on-premises teams. It is primarily telework, with onsite attendance at Fort Meade at least one day per week or as needed. Additional onsite time may be required during onboarding and program integration. Occasional travel to other DCSA locations, vendor sites, or training may be required, estimated at less than 10%. Flexible hours and participation in an on-call rotation may be needed for critical incidents, maintenance windows, and emergency response. The position offers a stated pay range of $140,000 to $156,764, depending on experience, seniority, geographic location, and other factors permitted by law. Benefits may include healthcare, dental, vision and life insurance, a 401(k), education assistance, paid time off, holidays, and other paid leave required by law.

Requirements

At least 5 years of hands-on experience in cybersecurity architecture and engineering, including at least 2 years implementing enterprise security tools and platforms in large-scale, complex environments.
Active Secret clearance, with eligibility to be upgraded to TS/SCI.
Meet DoD 8570 certification requirements at hire: IAT Level II certification, such as Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP, or a higher-tiered 8570 certification.
Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; an equivalent combination of military service and/or at least 4 years of significant, relevant work experience may be considered instead.
Engineering experience with enterprise SIEM solutions such as Elastic, Splunk, or LogRhythm, and SOAR platforms such as Swimlane or similar.
Knowledge of EDR/XDR solutions such as CrowdStrike, Microsoft Defender for Endpoint, or Trellix.
Experience with security scanning and vulnerability management tools such as Nessus, Rapid7, Tenable, Qualys, or BurpSuite.
Knowledge of AWS environments, including EC2, Lambda, and S3, and cloud-native security tools such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.
Understanding of compliance frameworks including NIST CSF, NIST RMF/800-53, FISMA, FedRAMP, CMMC, DFARS, ISO 27001/27002, and DoD STIGs.
Ability to communicate complex technical solutions, security concepts, and risk assessments verbally and in writing to diverse audiences.
For an alternate worksite outside DCSA facilities or corporate office space, reliable voice communication (cell phone preferred) and a stable, capable internet connection are required.
Ability to work flexible hours as needed and participate in an on-call rotation for critical security engineering support.

Nice To Haves

CASB solutions knowledge.
Experience with next-generation firewalls such as Palo Alto, Fortinet, or Cisco Firepower; IDS/IPS, WAF, or NAC.
Experience with SA&A and ATO processes.
Scripting and automation skills using Python, PowerShell, or Bash.
Infrastructure as Code experience with Terraform, Ansible, or CloudFormation.
DevSecOps and CI/CD security experience.
Containerization experience with Docker or Kubernetes.
Occasional travel availability to other DCSA locations, vendor sites, or training purposes, estimated at less than 10%.

Responsibilities

Help lead the selection, evaluation, testing, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity tools.
Respond to customer queries and recommend tools and solutions.
Develop integration strategies so security tools and enterprise systems interoperate; engineer data flows and correlation rules for threat detection and response.
Develop and maintain security tool roadmaps, optimize configurations for effectiveness, performance, and cost efficiency, and support change-management governance.
Implement security strategies for hybrid environments and consistent security posture across platforms.
Review architectures and design patterns for secure application deployment, data protection, and infrastructure hardening; apply best practices for cloud-native, IoT, and edge computing.
Maintain resilient security engineering for business continuity, disaster recovery, and high availability; establish security engineering principles and standards.
Align security architectures with regulatory requirements and frameworks, including NIST RMF, FISMA, FedRAMP, CMMC, ISO 27001, and DoD STIGs.
Support security assessments, architecture reviews, audits, threat modeling, vulnerability analysis, and impact assessments.
Prepare security authorization package artifacts and support ATO processes, remediation plans, compensating controls, and POAMs.
Develop security requirements and evaluation criteria for technology acquisitions and vendor selection.
Plan and execute security tool upgrades, migrations, and modernization with minimal operational impact; establish secure data-disposal procedures for decommissioning.
Manage technical debt and strategies for securing or replacing legacy systems.
Use and help develop security policies, standards, procedures, and guidelines; maintain security baselines and hardening guides.
Define security metrics, KPIs, and KRIs and ensure policies align with regulations, industry frameworks, and organizational risk tolerance.
Serve as a cybersecurity engineering and security tools subject-matter expert and technical authority; troubleshoot complex integration and operational issues.
Lead proof-of-concept initiatives for emerging security technologies and mentor junior security architects, engineers, and analysts.
Present security engineering solutions and recommendations to senior leadership, technical teams, and stakeholders.
Support critical security incidents, maintenance windows, and emergency response activities as needed, including through an on-call rotation.
Communicate complex technical solutions, security concepts, and risk assessments verbally and in writing to diverse audiences, including senior leadership.