Endpoint Security Solutions Engineer

Information Technology --> Cyber

Hanahan, SC

ID: 767-383

Full-Time/Regular

Endpoint Security Solutions Engineer

Charleston, SC

Minimum Secret Clearance required with upgrade eligibility to Top Secret

As an ESS Engineer you will configure, install, host and perform operations and maintenance for the DHA ESS ePolicy Orchestrator servers and client-side application system components, as well as support the implementation and maintenance of ESS for DHA systems and other tools used by for management of the network protection suites and MHS Intranet.

Position Requirements And Duties

• Evaluate Host Intrusion Prevention events by using any combination of vendor documentation, research, operational testing, developer support, and systems administration support to determine if ESS events are legitimate functions or an indicator of malicious activity.
• Assist customers (local and remote) with troubleshooting ESS point product installations and configurations using Trellix documentation and log files.
• Develop custom ESS signatures based on information from JFHQ-DODIN, DHA Cyber Operations Center, NIWC CSSP, and other stakeholders.
• Coordinate with systems administrators to deploy and test new software.
• Coordinate with all stakeholders to schedule and test ESS upgrades and maintenance.
• Install, configure, and deploy ESS point products as required by DoD, DHA, SPAWAR CSSP, or other security leadership.
• Tune ESS module policies IAW good security practice and in support of the DHA mission.
• Track, measure and evaluate ESS compliance across the enterprise.
• Participate in rotational on-call duties to provide after-hours support
  
  

Qualifications

• US Citizen
• AT least 3 years of experience using, maintaining and/or administering ESS on DoD (or equivalent) Environment
• Bachelor’s degree in a relevant technical discipline or at least five years of directly relevant experience
  
  

Desired Qualifications

• Experience in an enterprise environment (2000 or more servers).
• Background in Windows and Linux OS’ systems administration.
• Software troubleshooting with Trellix Platinum support assistance.
• Scripting (PowerShell or Python preferred).
• Experience developing DLP policy and troubleshooting Device Control Module (DCM).
• Experience with Policy Auditor.
• Experience with Trellix Application and Change Control (TACC).
• Experience with Trellix Rogue System Detection (RSD).
• Experience with DISA’s Continuous Monitoring Risk Scoring (CMRS) Site.
• Experience deploying products via SCCM.
• Experience with Trellix ePO Endpoint Deployment Kit (EEDK).
• Familiarity with Assured Compliance Assessment Solution (ACAS).
• ESS Administrator 201
• ESS Advanced Administrator 301
• Experience with ServiceNow ITSM Ticketing System.
• Experience with Microsoft Defender for Endpoint/XDR
  
  

Certifications

• DoD approved IA baseline certification(s) 8570 IAT Level II Certification
• DoD 8140 Category – CSSP Auditor
  
  

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.