Endpoint Security Engineer – Journeyman

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Act as a technical expert for McAfee/Trellix endpoint-security technologies within the DoD Endpoint Security Solutions framework.

• Assist in the administration, configuration, maintenance, and monitoring of sanctioned endpoint-security tools and services.

• Execute and uphold endpoint-security policies, configurations, exclusions, rules, and enforcement settings.

• Oversee endpoint agents for connectivity, communication, deployment, updates, and operational health issues.

• Investigate endpoint agents that are unhealthy, inactive, non-communicative, outdated, or improperly configured.

• Diagnose failures in policy enforcement, update issues, deployment errors, and gaps in endpoint protection.

• Implement corrective actions approved by the Government and verify the restoration of endpoint protections.

• Review ESS reports and dashboards to detect security events, compliance concerns, policy failures, and necessary remediation.

• Investigate endpoint-security alerts and incidents and coordinate response efforts with cybersecurity, infrastructure, application, and Government teams.

• Coordinate the deployment, upgrade, repair, removal, and replacement of McAfee/Trellix agents with Task 4 infrastructure staff.

• Assist in endpoint remediation activities related to operating-system configurations, security policies, agents, signatures, content updates, and authorized software.

• Ensure endpoints receive the requisite policies, signatures, content, and product updates.

• Validate endpoint compliance following remediation, configuration adjustments, maintenance, or agent deployment.

• Track findings related to endpoint security, including owners, corrective actions, dependencies, deadlines, and evidence of closure.

• Support remediation of vulnerabilities pertaining to endpoint-security configurations, agent health, or protection status.

• Collect and preserve logs, screenshots, reports, configuration details, and other evidence for remediation and compliance.

• Create and update incident, problem, change, and remediation tickets.

• Support cybersecurity incident reporting by compiling endpoint data, event specifics, logs, timelines, and investigative evidence.

• Escalate significant occurrences, ongoing policy failures, widespread agent health issues, and unresolved compliance deficiencies.

• Collaborate with system administrators and asset management personnel to reconcile endpoint records, agent status, and authoritative inventories.

• Assist in security control testing and provide endpoint security evidence for RMF, ATO, ATC, audit, and inspection processes.

• Develop reports on endpoint security compliance, summaries of agent health, event metrics, trend analyses, and briefing materials.

• Maintain documentation for endpoint-security procedures, configuration records, standard operating procedures, troubleshooting guides, and technical knowledge articles.

• Suggest technical and process enhancements to strengthen endpoint protection, agent health, monitoring, and compliance reporting.

⛳️ Requirements

• Active Secret clearance or higher.

• Bachelor’s degree in Cybersecurity, Information Systems, or a related discipline.

• At least 7 years of pertinent experience in cybersecurity, endpoint security, information assurance, or information security.

• Current CompTIA Security+ certification.

• Practical experience administering or supporting McAfee endpoint-security technologies.

• Experience in supporting DoD Endpoint Security Solutions within an enterprise environment.

• Familiarity with McAfee or Trellix ePolicy Orchestrator, Endpoint Security, McAfee Agent, threat-prevention modules, firewall policies, and web-control features.

• Experience in monitoring and remediating unhealthy, inactive, noncommunicating, or noncompliant endpoint agents.

• Experience troubleshooting deployment of agents, policy enforcement, signature updates, content distribution, and endpoint protection failures.

• Experience analyzing endpoint-security events, alerts, logs, dashboards, and compliance reports.

• Experience coordinating endpoint remediation with infrastructure, desktop support, network, application, and cybersecurity teams.

• Familiarity with Host Based Security System technologies or legacy McAfee capabilities utilized within DoD environments.

• Experience supporting cybersecurity incident analysis, evidence gathering, escalation, and reporting.

• Knowledge of the DoD Risk Management Framework, NIST SP 800-53 controls, DISA Security Technical Implementation Guides, and applicable DoD endpoint-security requirements.

• Experience providing technical evidence for ATO, ATC, security-control assessments, audits, or inspections.

• Familiarity with ACAS or Tenable, STIG Viewer, SCAP tools, eMASS, ServiceNow, or equivalent cybersecurity and workflow platforms.

• Experience aligning endpoint agent status with configuration management or asset inventory records.

• Experience in developing endpoint compliance reports, agent health metrics, event trends, and remediation dashboards.

• Strong skills in troubleshooting, analysis, documentation, communication, and cross-functional coordination.

• Ability to manage multiple endpoint security events, remediation efforts, and technical dependencies in a structured enterprise environment.

🏝️ Benefits

• Remote work arrangement.

• Active competitive government contract bid opportunity.

• Equal Employment Opportunity and Affirmative Action employer.