Cyber Security Assessor

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™


ASRC Federal is actively hiring a Cyber Security Assessor in support of our DCSA program based out of Hanover Maryland.

This is primarily a Telework position with a requirement to be onsite up to one (1) day a week.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefit packages. This position is offering a pay range of $125,000.00 - $135,000.00 depending on experience, seniority, geographic locations, and factors permitted by law. Benefits offered may include health care, dental, vision, life insurance; 401k; education assistance; paid time off including Paid Time Off, holidays and any other paid leave required by law.

Job Description:
ASRC Federal is seeking a Cyber Security Assessor, who will provide broad and in-depth knowledge to conduct offensive cyber operations across the organization. In this role, they will conduct offensive security operations to emulate adversary tactics and procedures to test preventative, detective, and response controls across the global technology landscape. You will use your expertise to help influence technology decisions and work as part of a team to create consistent approaches to the offensive security processes and techniques.

Minimum Requirements:
• At least two (2) years of experience in penetration testing or related cyber security role. May accept experience from related roles (e.g., IT security, network administration, or cybersecurity internships) with hands-on experience through capture the flag, bug bounties, or personal projects.
• Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Associate’s degree in Cybersecurity, Information Systems, Computer Science, or related field. Equivalent Military experience will be considered.
• Certification(s):
◦ Candidates must meet DD8140/DoD8570 IAT Level II (or higher) baseline certification requirements at the time of hire. Acceptable certifications include at least one of the following:
• Cisco Certified Network Engineer Security (CCNA Security)
• CompTIA Security+ CE
• CompTIA Cybersecurity Analyst (CySA+)
• GIAC Security Essentials Certification (GSEC)
• Systems Security Certified Practitioner (SSCP)
◦ Addition desired certifications:
• Certified Ethical Hacker (CEH) Preferred
• CyberSec First Responder (CFR) Preferred
• Computer Hacking Forensic Investigator (CHFI) Preferred
• CompTIA Cloud+ Preferred
• Practical Network Penetration Tester (PNPT)
• Junior Penetration Tester – INE/OffSec (eJPT)
• Certified Professional Penetration Tester (eCPPT)
• Offensive Security Certified Professional (OSCP)
• Certified Red Team Professional (CRTP)
• GIAC Web Application Penetration Tester (GWAPT)
• GIAC Penetration Tester (GPEN)
• GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)

Basic Qualifications:
Candidates should demonstrate expertise or strong foundational understanding in the following areas:
• Ability to plan and execute penetration tests and red team operations against enterprise systems, applications, and networks.
• Familiarity with adversary emulation, TTPs (Tactics, Techniques, and Procedures), and MITRE ATT&CK framework.
• Ability to identify, exploit, and document vulnerabilities in diverse environments, including cloud-based infrastructure.
• Proficiency with offensive security tools such as:
◦ Kali Linux, Burp Suite, Nmap, Metasploit, C2 Frameworks, Wireshark, Impacket, BloodHound, Responder
• Working knowledge of one or more scripting or automation languages (e.g., Python, PowerShell, Bash).
• Familiarity with Linux and Windows command line.
• Strong verbal and written communication skills for documenting findings and presenting to both technical and non-technical stakeholders.
• Ability to conduct post-exploitation activities and lateral movement simulations in safe and controlled environments.
• Understanding of defensive techniques and how to evade common detection tools (EDR, SIEM, IDS/IPS).
• Experience conducting threat modeling and advising on security architecture is a plus.


We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.

EEO Statement
ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.