Cybersecurity Tools Engineer

ASRC Federal•Fort Meade, MD

2d•$140,000 - $156,764•Hybrid

About The Position

ASRC Federal is hiring a Cybersecurity Tools Engineer to support its Defense Counterintelligence Security Agency (DCSA) program, based out of Fort Meade, Maryland. The engineer will work with cloud security engineering and on-premises teams as a technical resource for cybersecurity tools, platforms, and frameworks. The role helps define and enhance organization-wide and cloud-wide security systems protecting critical assets, data, and systems in complex hybrid and multi-cloud environments. The engineer will recommend, select, integrate, and optimize security technologies, including SIEM/SOAR platforms, firewalls, endpoint detection and response solutions, and other tools. The role supports implementation, incident response, and threat analysis, and ensures compliance with federal regulations and industry frameworks across the lifecycle of security systems, from acquisition through modernization. This is primarily a telework position, with onsite work at Fort Meade at least one day per week or as needed. Additional onsite time may be required for initial onboarding and program integration. Occasional travel to other DCSA locations, vendor sites, or training may be required, estimated at less than 10%. The role may require flexible hours for critical incidents, maintenance windows, and emergency response, as well as participation in an on-call rotation.

Requirements

At least 5 years of hands-on experience in cybersecurity architecture and engineering, including at least 2 years implementing enterprise security tools and platforms in large-scale, complex environments.
Active Secret clearance, required; must be eligible for upgrade to TS/SCI.
Must meet 8570 certification requirements at hire: IAT Level II certification (for example, Security+ CE, CCNA Security, CySA+, GICSP, GSEC, or SCCP) or a higher-tiered 8570 certification.
Degree in Cybersecurity, Computer Science, Information Systems Management, or a related field; an equivalent combination of military service and/or at least 4 years of significant, relevant work experience may be considered in lieu of a degree.
Engineering experience with enterprise SIEM solutions such as Elastic, Splunk, or LogRhythm, and SOAR platforms such as Swimlane or similar.
Knowledge of EDR/XDR solutions such as CrowdStrike, Microsoft Defender for Endpoint, or Trellix.
Experience with security scanning and vulnerability management tools such as Nessus, Rapid7, Tenable, Qualys, or BurpSuite.
Knowledge of AWS environments, including EC2, Lambda, and S3, and cloud-native security tools such as AWS Security Hub, Azure Security Center, or GCP Security Command Center.
Understanding of compliance frameworks including NIST CSF, NIST RMF/800-53, FISMA, FedRAMP, CMMC, DFARS, ISO 27001/27002, and DoD STIGs.
Ability to communicate complex technical solutions, security concepts, and risk assessments verbally and in writing to diverse audiences, including senior leadership.
For alternate worksites outside DCSA facilities or corporate office space, reliable voice communication (cell phone preferred) and a stable, capable internet connection are required.
Ability to work flexible hours as needed for critical security incidents, maintenance windows, and emergency response, and to participate in an on-call rotation.

Nice To Haves

CASB solution experience.
Experience with next-generation firewalls such as Palo Alto, Fortinet, or Cisco Firepower; IDS/IPS, WAF, or NAC.
Experience with security assessment and authorization (SA&A) and ATO processes.
Scripting and automation skills in Python, PowerShell, or Bash.
Infrastructure as Code experience with Terraform, Ansible, or CloudFormation.
DevSecOps and CI/CD security experience.
Containerization experience with Docker or Kubernetes.

Responsibilities

Help lead the selection, evaluation, testing, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity tools; respond to customer questions and recommend tools and solutions.
Develop integration strategies that enable interoperability between security tools and enterprise systems; engineer data flows and correlation rules for threat detection and response.
Develop and maintain security tool roadmaps, optimize configurations for effectiveness, performance, and cost efficiency, and support governance frameworks such as change management.
Implement security strategies for hybrid environments to promote a consistent security posture across platforms.
Review system architectures and design patterns for secure application deployment, data protection, and infrastructure hardening, applying best practices for cloud-native, IoT, and edge computing.
Maintain resilient security engineering for business continuity, disaster recovery, and high availability; establish security engineering principles and standards.
Align security architectures with regulatory mandates, including NIST RMF, FISMA, FedRAMP, CMMC, ISO 27001, and DoD STIGs.
Support security assessments, architecture reviews, audits, threat modeling, vulnerability analysis, and impact assessments.
Prepare artifacts for security authorization packages and ATO processes; assist with remediation plans, compensating controls, and POAMs.
Develop security requirements and evaluation criteria for technology acquisitions and vendor selections.
Plan and execute security tool upgrades, migrations, and modernization with minimal operational impact; establish secure data-disposal procedures for decommissioned systems.
Manage technical debt and strategies for securing or replacing legacy systems.
Use and help develop security policies, standards, procedures, and guidelines; maintain security baselines and hardening guides.
Define security metrics, KPIs, and KRIs, and ensure policies align with federal regulations, industry frameworks, and organizational risk tolerance.
Serve as a subject matter expert and technical authority for cybersecurity engineering and security tools; troubleshoot complex integration and operational issues.
Lead proof-of-concept initiatives for emerging security technologies and mentor junior security architects, engineers, and analysts.
Present security engineering solutions and recommendations to senior leadership, technical teams, and stakeholders.