We are seeking a Cyber Asset Attack Surface Management (CAASM) Engineer to help lead the end-to-end deployment and system integration engineering across several diverse client networks.
Candidates should be technical problem solvers with a solid understanding of network operations, perhaps an ITSM (ServiceNow/Jira) specialist who is looking for a high impact, security-centric engineering position.
Your primary goal will be to champion the unification of siloed datasets into a definitive "single source of truth" for all IT assets, providing the organization with a comprehensive and accurate view of their entire attack surface.
This is a full-time, on-site position based in the Washington DC Metro area, with office options in Tysons Corner or Reston with minimal travel requirements.
Responsibilities
- Engineer the installation and configuration of CAASM solutions (such as Axonius or Armis) to ensure successful integration across complex client environments.
- Data Integration & Automation: Design and monitor API-driven connections between CAASM, vulnerability scanners, and third-party security tools to ingest and correlate datasets.
- ITSM Workflow Orchestration: Develop backend connections to ITSM platforms (ServiceNow/Jira) to automate ticket triage, remediation tracking, and CMDB health updates.
- Risk Analysis: Interpret complex cyber datasets to ensure reliability and provide actionable insights by correlating asset data with threat intelligence and vulnerability feeds.
- System Maintenance: Perform daily monitoring and lifecycle maintenance to ensure platform health and data integrity.
Qualifications
- Experience: 4+ years managing and integrating COTS solutions in hybrid cloud settings.
- Technical Skills: 3+ years in Linux/Windows administration and 3+ years in scripting (Python, Shell, or PowerShell) for data retrieval and debugging.
- Workflow Expertise: Proven experience architecting or integrating with workflow systems like Jira or ServiceNow.
- Education: Bachelor’s + 3 years or Associate’s + 5 years (years of experience accepted in lieu of degree).
- Certification: Must hold an active DoD 8570.01-M IAT Level II certification (e.g., Security+ CE, CySA+, or CCNA-Security).
- Future Certification: Must be able to obtain a CSSP Infrastructure Support certification (e.g., CEH, Cloud+, or CND) within 30 days of hire.
- Candidates must be a US Citizen and hold an active TS/SCI clearance and be willing to undergo a CI poly.
Are you ready to take the next step in your cybersecurity career? If you meet the qualifications outlined above, please email your resume to recruiting@lkco.co. Our team will review your application and follow up with you regarding next steps.
