{"id":3984113,"url":"https://alion.io/job/asrc-federal-cybersecurity-tools-engineer","title":"Cybersecurity Tools Engineer","company":{"id":1959316,"name":"ASRC Federal","domain":"asrcfederal.com","url":"https://alion.io/company/asrcfederal","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":89,"open_postings":160,"ghost_share":0,"stale_share":0.456,"repost_share":0,"time_to_fill_p50_days":29,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140000,"max":156764,"currency":"USD","period":"year","gross":null,"usd_annual":156764},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EC2","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"LogRhythm","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Nessus","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Ansible","optional":true},{"name":"CI/CD","optional":true},{"name":"CloudFormation","optional":true},{"name":"CMMC","optional":true},{"name":"Docker","optional":true},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST CSF","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Terraform","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-11-09T05:00:00Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T08:00:30Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Position Description:\nASRC Federal is actively hiring a Cybersecurity Tools Engineer in support of our Defense Counterintelligence Security Agency (DCSA) program based out of Fort Meade, MD.\nWe are seeking a skilled and experienced Cybersecurity Tools Engineer to work in our cloud security engineering team and with our on-premises team. The ideal candidate will serve as a technical resource for cybersecurity tools, platforms, and frameworks, responsible for helping to define and enhance cloud-wide and/or organization-wide security systems that protect critical assets, data, and systems across complex, hybrid, and multi-cloud environments.\nThis role requires expertise in selecting, integrating, and optimizing advanced cybersecurity tools including SIEM/SOAR platforms, firewalls, endpoint detection and response (EDR) solutions, and other security technologies. The Cybersecurity Tools Engineer will recommend tools, support successful implementation, and assist incident response and threat analysis teams. The role ensures compliance with federal regulations and industry frameworks throughout the complete lifecycle of security systems from acquisition through modernization.\nThis is primarily a Telework position with a requirement to be onsite at least one (1) day a week or as needed at Fort Meade, MD. Additional onsite time may be required during initial onboarding and program integration.\nWe invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefit packages. This position is offering a pay range of $140,000.00 - $156,764.00 depending on experience, seniority, geographic locations, and factors permitted by law. Benefits offered may include health care, dental, vision, life insurance; 401k; education assistance; paid time off including Paid Time Off, holidays and any other paid leave required by law.\nMinimum Requirements: \nMinimum of 5 years of hands-on experience cybersecurity architecture and engineering with at least 2 years of hands-on experience implementing enterprise security tools and platforms in large-scale, complex environments\nActive Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI\nMust meet 8570 certification requirements at the time of hire. IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification\nDegree in Cybersecurity, Computer Science, Information Systems Management, or a related field. An equivalent combination of military service and/or at least (4) years of significant, relevant work experience may be considered in lieu of degree requirement.\nRequired Technical Expertise:\nSIEM/SOAR Platforms: Engineering experience with enterprise SIEM solutions (Elastic, Splunk, LogRhythm, etc.) and SOAR platforms (Swimlane or similar).\nEndpoint Security: Knowledge of EDR/XDR solutions (CrowdStrike, Microsoft Defender for Endpoint, Trellix, etc.).\nSecurity Scanning & Vulnerability Management: Experience with tools such as Nessus, Rapid7, Tenable, Qualys, or BurpSuite.\nCloud Security: Knowledge of AWS cloud environments (EC2, Lambda, S3) and cloud-native security tools (AWS Security Hub, Azure Security Center, GCP Security Command Center); CASB solutions a plus.\nNetwork Security: Experience with next-generation firewalls (Palo Alto, Fortinet, Cisco Firepower), IDS/IPS, WAF, and NAC is a plus.\nCompliance Frameworks: Understanding of NIST CSF, NIST RMF/800-53, FISMA, FedRAMP, CMMC, DFARS, ISO 27001/27002, and DoD STIGs. Experience with SA&A and ATO processes a plus.\nAdditional Skills: Scripting/automation (Python, PowerShell, Bash); Infrastructure as Code (Terraform, Ansible, CloudFormation); DevSecOps and CI/CD security; containerization (Docker, Kubernetes) a plus.\nResponsibilities:\nTool Integration and Platform Management\nHelp lead the selection, evaluation, testing, and integration of enterprise security software, SIEM/SOAR platforms, firewalls, endpoint defenses, and other cybersecurity tools. Respond to customer queries and make recommendations for tools and solutions.\nImplement comprehensive integration strategies for seamless interoperability between security tools and enterprise systems; engineer data flows and correlation rules for effective threat detection and response.\nDevelop and maintain security tool roadmaps; optimize configurations for effectiveness, performance, and cost efficiency; support governance frameworks including change management.\nFramework Design and Architecture\nImplement comprehensive security strategies addressing hybrid environments to ensure consistent security posture across platforms.\nReview system architectures and design patterns for secure application deployment, data protection, and infrastructure hardening; apply best practices for cloud-native, IoT, and edge computing.\nMaintain resilient security engineering supporting business continuity, disaster recovery, and high availability; establish security engineering principles and standards.\nRisk Management and Compliance\nAlign security architectures with regulatory mandates including NIST RMF, FISMA, FedRAMP, CMMC, ISO 27001, and DoD STIGs.\nSupport security assessments, architecture reviews, audits, threat modeling, vulnerability analysis, and impact assessments.\nPrepare artifacts for security authorization packages and ATO processes; assist with remediation plans, compensating controls, and POAMs.\nLifecycle Management\nDevelop security requirements and evaluation criteria for technology acquisitions and vendor selections.\nPlan and execute security tool upgrades, migrations, and modernization with minimal operational impact; establish decommissioning procedures for secure data disposal.\nManage technical debt and strategies for legacy system security enhancement or replacement.\nPolicy, Standards, and Governance\nUse and help develop comprehensive security policies, standards, procedures, and guidelines; maintain security baselines and hardening guides.\nDefine security metrics, KPIs, and KRIs; ensure policies align with federal regulations, industry frameworks, and organizational risk tolerance.\nTechnical Leadership and Innovation\nServe as SME and technical authority for cybersecurity engineering and security tools; provide advanced troubleshooting for complex integration and operational issues.\nLead proof-of-concept initiatives for emerging security technologies; mentor junior security architects, engineers, and analysts.\nPresent complex security engineering solutions and recommendations to senior leadership, technical teams, and stakeholders.\nWork Environment and Physical Demands:\nThis is primarily a Telework position with a requirement to be onsite at least one (1) day a week at Fort Meade, MD (or additional days as required by the customer).\nIf alternate worksite is other than DCSA facilities or corporate office space, must have reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.\nMust be able to communicate complex technical solutions, security concepts, and risk assessments to diverse audiences, including senior leadership, both verbally and in written form.\nMay require occasional travel to other DCSA locations, vendor sites, or for training purposes (estimated <10%).\nMust be able to work flexible hours to support critical security incidents, maintenance windows, and emergency response activities as needed; ability to participate in on-call rotation for critical security engineering support.","description_format":"text","description_chars":7490,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":["401k plan","Education assistance","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Digital Government","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-09T21:01:11Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Filed H-1B visas in the last two years","filings_12m":0,"filings_prev_12m":2,"green_card_filings_12m":0,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["conf:4","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":156764,"is_top_pay":false},"html_url":"https://alion.io/job/asrc-federal-cybersecurity-tools-engineer","json_url":"https://alion.io/job/asrc-federal-cybersecurity-tools-engineer.json","meta":{"generated_at":"2026-11-10T12:12:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28342,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1959316},"rest":"https://alion.io/mcp/rest/get_company?id=1959316"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fasrc-federal-cybersecurity-tools-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fasrc-federal-cybersecurity-tools-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fasrc-federal-cybersecurity-tools-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/asrc-federal-cybersecurity-tools-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fasrc-federal-cybersecurity-tools-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3984113}},{"tool":"search_jobs","arguments":{"company":"asrcfederal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3984113},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}