Logo
Ennoble First

Forescout Cyber Security Engineer

Ennoble First, Vienna, Virginia, United States, 22184

Save Job

Forescout Cyber Security Engineer Location: College Park, MD; Washington, DC; Reston, VA

Required Clearance: Active TS/SCI with polygraph eligibility

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver.

Job Description Ennoble First is seeking a Forescout Cyber Security Engineer to support the deployment, operation, and sustainment of enterprise network access control (NAC) and device visibility capabilities. This role focuses on implementing and maintaining Forescout platforms to enable continuous device discovery, classification, compliance enforcement, and Zero Trust monitoring across complex Government environments.

The Forescout Cyber Security Engineer works closely with network engineering, cybersecurity operations, and platform teams to ensure accurate asset visibility, policy enforcement, and integration with enterprise security toolchains.

Primary Responsibilities

Deploy, configure, operate, and sustain Forescout platforms supporting device discovery, classification, and network access control

Implement and maintain compliance, posture assessment, and enforcement policies aligned with Zero Trust principles

Integrate Forescout with IAM, endpoint security, vulnerability management, SIEM, and SOAR platforms

Configure workflows, policies, and automated responses to enforce security controls and reduce risk

Monitor platform health, policy effectiveness, and system performance

Perform upgrades, patching, configuration changes, and lifecycle maintenance

Troubleshoot visibility gaps, enforcement failures, and integration issues

Support SOC and cybersecurity operations teams with device attribution and investigative support

Coordinate with network engineers to ensure proper integration with switching, routing, and wireless infrastructure

Develop and maintain technical documentation, runbooks, and operational procedures

Required Qualifications

5+ years of experience supporting cybersecurity engineering, network security, or security operations

3+ years of experience deploying or administering network access control (NAC) or device visibility platforms

2+ years of experience deploying, hosting, monitoring, and securing solutions for Government customers

Strong understanding of enterprise networking concepts, access control, and device posture enforcement

Experience administering Linux- or appliance-based security platforms

Experience integrating security platforms using APIs or native connectors

Active TS/SCI clearance with polygraph eligibility

Education Associate's degree and 5+ years of experience supporting IT projects and activities, or Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities Years of experience may be accepted in lieu of degree.

Certifications DoD 8570.01-M Information Assurance Technician (IAT) Level II certification (e.g., Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND)

Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider – Infrastructure Support certification (e.g., CEH, CHFI, CFR, Cloud+, or CND) within 30 days of start date.

Preferred Qualifications

Hands-on experience implementing and maintaining Forescout in production environments

Experience supporting DoD or Intelligence Community missions

Familiarity with Zero Trust Architecture and device-based access enforcement

Experience integrating NAC with switching, wireless, and endpoint protection platforms

Security certifications such as CISSP, CCNP Security, GCIA, or similar

Compensation Salary range: $120,000 – $150,000 The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered include responsibilities of the role, education, experience, knowledge, skills, internal equity, alignment with market data, and applicable laws.

Equal Employment Opportunity Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

E-Verify Participation Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.

E-Verify is a registered trademark of the U.S. Department of Homeland Security. Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Ennoble First participates in E-Verify.

The information below will be listed on our website's careers landing page.

EEO is the Law | Pay Transparency Nondiscrimination

www.dhs.gov/E-Verify

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.

#J-18808-Ljbffr