Endpoint Security Support Analyst (Crowdstrike)

The Naval Information Warfare Center (NIWC) Atlantic Defensive Cyberspace Operations (DCO) Integrated Product Team (IPT) is charged with the mission of conducting Defensive Cyberspace Operations to defend subscriber networks. The DHA Cybersecurity Operations Center (CyOC) coordinates and orchestrates cybersecurity activities execution at the DoD Component scale to protect information systems against unauthorized activity, vulnerabilities, or threats. RMC is hiring for an experienced Endpoint Security Support Analyst (Crowdstrike) who will support a US Navy environment.

The Endpoint Security Support Analyst serves as a frontline interface between DHA subscribers and the Endpoint Security team. This role is responsible for monitoring the CrowdStrike Falcon console, performing initial triage of security alerts, and providing Tier 1 customer support for endpoint security issues. The position focuses on documenting and categorizing events using established playbooks, handling service desk inquiries, and escalating complex issues to senior Endpoint Security Operators for resolution.

Duties

• Alert Triage & Customer Support - Act as the first responder for customer support requests submitted via the service desk (ServiceNow). Monitor the CrowdStrike detection queue and provide Tier 1 support for endpoint security inquiries.
• Initial Investigation & Documentation - Perform initial triage of low-to-medium severity alerts using established mini-playbooks. Accurately document findings and categorize detections as Benign, an Event, or requiring escalation.
• Escalation & Communication - Escalate complex technical issues, unresolved user problems, and potential Incidents to senior Endpoint Security Operators for advanced investigation and response.
• Compliance & Reporting Support - Assist senior operators by running pre-defined compliance reports, tracking task completion in the ticketing system, and helping to maintain accurate records for auditing purposes.

Experience: A minimum of one to two years of experience in an IT help desk, customer support, or similar administrative role.

Certifications: Must be able to obtain a DoD 8570 IAM Level I certification within 6 months of hire.

Education: An Associate’s degree in a relevant field or two years of equivalent professional experience.

Minimum Security Clearance: Secret

Core Skills:

• Strong written and verbal communication skills with an emphasis on customer service.
• Ability to follow established procedures and checklists with high attention to detail.
• Strong analytical skills for initial problem assessment and categorization.
• Proficiency with standard desktop programs (MS Office, Adobe Acrobat).

Highly Desired Skills:

• Help Desk Experience: Prior experience using enterprise ticketing systems, particularly ServiceNow.
• Security Concepts: Familiarity with basic host-based security tools and Endpoint Detection & Response (EDR) concepts.
• Systems Familiarity: Basic understanding of Windows and/or Linux operating systems.
• Collaboration Tools: Experience with MS Teams, Confluence, and SharePoint for documentation and team collaboration.

At RMC, we’re committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.