Advanced Information Assurance Engineer

As a Cybersecurity / Endpoint Security Engineer, you will apply proficient cybersecurity and systems engineering knowledge to implement, administer, test, and maintain endpoint detection and response (EDR) and extended detection and response (XDR) systems while contributing to broader cybersecurity and Information Assurance activities. You will collaborate with systems, infrastructure, integration, test, and cybersecurity teams to analyze, implement, and verify security requirements within Department of Defense computing environments.

Approximately 50–75% of this position will focus on EDR/XDR engineering activities, including installation and configuration of COTS security products, endpoint management systems, policy development, security testing, troubleshooting, upgrades, and maintenance. The remaining effort will include vulnerability and configuration scanning, analysis and reporting of findings, remediation tracking, collection of objective evidence, and development and coordination of cybersecurity documentation.

This position requires the ability to plan and execute assigned security engineering tasks independently, exercise sound technical judgment, and coordinate resolution of system security concerns with multidisciplinary engineering teams.

What you’ll experience

• Implementing, configuring, testing, and administering EDR/XDR technologies across Windows and Linux environments
• Developing and implementing system security policies based on system and cybersecurity requirements
• Planning and executing security testing and evaluating the implementation of security requirements
• Assessing vulnerability and configuration findings, recommending corrective actions, and verifying remediation
• Developing and maintaining security documentation and supporting technical evidence
• Contributing to security requirements analysis, system security design, and Assessment and Authorization (A&A) activities
• Collaborating with project leaders and multidisciplinary engineering teams to complete system security activities

Responsibilities may include

• Install, configure, maintain, test, and troubleshoot EDR/XDR products and associated endpoint components
• Administer EDR/XDR products and associated technologies
• Develop, configure, test, deploy, and maintain system security policies
• Validate configuration and policy changes in representative lab or test environments with applicable security policies and controls enforced
• Monitor and assess endpoint health, agent communications, security events, content currency, and policy application across supported systems
• Independently investigate agent communication, policy enforcement, and application compatibility issues; identify contributing security controls and verify corrective actions through testing
• Evaluate interactions between application, platform, and site security policies, including policy inheritance and required exceptions
• Contribute to system security design, security requirements analysis, and allocation of applicable requirements to system components
• Plan and execute security testing and evaluate the implementation of applicable security requirements
• Execute and review vulnerability and security configuration scans; analyze, document, and track findings through remediation or disposition
• Implement and assess applicable DISA STIG requirements and document results
• Develop and maintain installation procedures, Policy Layout Guides (PLGs), policy assignments, configuration-controlled packages, security documentation, and supporting technical evidence
• Collect and maintain cybersecurity Objective Quality Evidence (OQE), prepare assigned cybersecurity compliance and A&A documentation, and coordinate documentation review and routing
• Assess system security threats and risks and recommend mitigation measures throughout the program life cycle
• Select appropriate standards, processes, procedures, and tools for assigned security engineering activities
• Coordinate with engineering and cybersecurity teams to investigate findings, recommend corrective actions, and verify remediation

What sets you apart

• Hands-on experience administering and troubleshooting Trellix ePolicy Orchestrator (ePO), Trellix Agent, Endpoint Security (ENS), HBSS, Microsoft Defender for Endpoint, CrowdStrike Falcon, and/or other EDR/XDR products
• Experience with Istio, Cilium, Calico, and/or other technologies supporting container networking and security
• Experience independently developing, modifying, implementing, and testing endpoint security policies
• Experience executing assessments and analyzing findings using ACAS/Tenable Nessus, Evaluate-STIG, DISA STIGs, SCAP Compliance Checker (SCC), Trivy, or similar cybersecurity assessment tools
• Experience contributing to DoD RMF and Assessment and Authorization (A&A) activities
• Experience administering and securing Windows Server, containers, and/or Red Hat Enterprise Linux (RHEL)
• Working knowledge of Active Directory, Group Policy, certificates, firewalls, and/or enterprise networking
• Experience applying PowerShell, Bash, Python, Ansible, or other scripting and automation technologies to improve engineering efficiency and repeatability
• Experience with Navy CANES or ESS environments, PLG development, configuration management, or deployed system validation
• Demonstrated ability to improve security implementation, testing, documentation, or operational management practices

Read the job posting on the Careers Gdms site

Source: the Careers Gdms iCIMS careers site. We last checked this job 2 days ago. We first saw it 5 days ago. A job on a job board does not always mean that the team interviews people now. We found this job board in a public list. We did not yet compare it with the careers page of the company.