Advanced Information Assurance Engineer

Basic Qualifications

Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience.

CLEARANCE REQUIREMENTS:Department of Defense Secret security clearance is required at time of hire. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

Responsibilities for this Position

As a Cybersecurity / Endpoint Security Engineer, you will apply proficient cybersecurity and systems engineering knowledge to implement, administer, test, and maintain endpoint detection and response (EDR) and extended detection and response (XDR) systems while contributing to broader cybersecurity and Information Assurance activities. You will collaborate with systems, infrastructure, integration, test, and cybersecurity teams to analyze, implement, and verify security requirements within Department of Defense computing environments.

Approximately 50–75% of this position will focus on EDR/XDR engineering activities, including installation and configuration of COTS security products, endpoint management systems, policy development, security testing, troubleshooting, upgrades, and maintenance. The remaining effort will include vulnerability and configuration scanning, analysis and reporting of findings, remediation tracking, collection of objective evidence, and development and coordination of cybersecurity documentation.

This position requires the ability to plan and execute assigned security engineering tasks independently, exercise sound technical judgment, and coordinate resolution of system security concerns with multidisciplinary engineering teams.

What you’ll experience:

Implementing, configuring, testing, and administering EDR/XDR technologies across Windows and Linux environments

Developing and implementing system security policies based on system and cybersecurity requirements

Planning and executing security testing and evaluating the implementation of security requirements

Assessing vulnerability and configuration findings, recommending corrective actions, and verifying remediation

Developing and maintaining security documentation and supporting technical evidence

Contributing to security requirements analysis, system security design, and Assessment and Authorization (A&A) activities

Collaborating with project leaders and multidisciplinary engineering teams to complete system security activities

What you bring to the table:

Proficient understanding and application of systems engineering and cybersecurity concepts, principles, and practices

Working knowledge of Windows and/or Linux operating systems, containerized workloads, and fundamental system administration practices

Practical experience installing, configuring, maintaining, and troubleshooting COTS software

Familiarity with cybersecurity specifications and guidance, including Risk Management Framework (RMF), DISA STIGs, and other government security requirements, and the ability to apply applicable guidance to assigned tasks

Proficient understanding of security testing, verification, and validation processes

Ability to independently investigate software, service, configuration, and connectivity issues and verify corrective actions

Ability to assess technical and cybersecurity findings, recognize system security risks, and clearly communicate concerns and recommended actions

Proficient written and verbal communication skills

Proficiency in Microsoft Office applications

Ability to plan and execute assigned project tasks, coordinate technical activities, and communicate status, risks, and dependencies

Responsibilities may include:

Install, configure, maintain, test, and troubleshoot EDR/XDR products and associated endpoint components

Administer EDR/XDR products and associated technologies

Develop, configure, test, deploy, and maintain system security policies

Validate configuration and policy changes in representative lab or test environments with applicable security policies and controls enforced

Monitor and assess endpoint health, agent communications, security events, content currency, and policy application across supported systems

Independently investigate agent communication, policy enforcement, and application compatibility issues; identify contributing security controls and verify corrective actions through testing

Evaluate interactions between application, platform, and site security policies, including policy inheritance and required exceptions

Contribute to system security design, security requirements analysis, and allocation of applicable requirements to system components

Plan and execute security testing and evaluate the implementation of applicable security requirements

Execute and review vulnerability and security configuration scans; analyze, document, and track findings through remediation or disposition

Implement and assess applicable DISA STIG requirements and document results

Develop and maintain installation procedures, Policy Layout Guides (PLGs), policy assignments, configuration-controlled packages, security documentation, and supporting technical evidence

Collect and maintain cybersecurity Objective Quality Evidence (OQE), prepare assigned cybersecurity compliance and A&A documentation, and coordinate documentation review and routing

Assess system security threats and risks and recommend mitigation measures throughout the program life cycle

Select appropriate standards, processes, procedures, and tools for assigned security engineering activities

Coordinate with engineering and cybersecurity teams to investigate findings, recommend corrective actions, and verify remediation

What sets you apart:

Hands-on experience administering and troubleshooting Trellix ePolicy Orchestrator (ePO), Trellix Agent, Endpoint Security (ENS), HBSS, Microsoft Defender for Endpoint, CrowdStrike Falcon, and/or other EDR/XDR products

Experience with Istio, Cilium, Calico, and/or other technologies supporting container networking and security

Experience independently developing, modifying, implementing, and testing endpoint security policies

Experience executing assessments and analyzing findings using ACAS/Tenable Nessus, Evaluate-STIG, DISA STIGs, SCAP Compliance Checker (SCC), Trivy, or similar cybersecurity assessment tools

Experience contributing to DoD RMF and Assessment and Authorization (A&A) activities

Experience administering and securing Windows Server, containers, and/or Red Hat Enterprise Linux (RHEL)

Working knowledge of Active Directory, Group Policy, certificates, firewalls, and/or enterprise networking

Experience applying PowerShell, Bash, Python, Ansible, or other scripting and automation technologies to improve engineering efficiency and repeatability

Experience with Navy CANES or ESS environments, PLG development, configuration management, or deployed system validation

Demonstrated ability to improve security implementation, testing, documentation, or operational management practices

Salary Note
This estimate represents the typical salary range for this position based on experience and other factors (geographic location, etc.). Actual pay may vary. This job posting will remain open until the position is filled.

Combined Salary Range
USD $112,924.00 - USD $125,275.00 /Yr.

Company Overview